Alternatives and similar repositories for Captain

Users that are interested in Captain are comparing it to the libraries listed below

• hugsy / modern-cpp-windows-driver-template
  Windows driver template, using C++20 & cmake & GithubActions
  ☆22Updated 9 months ago
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆35Updated last year
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆11Updated last year
• iqrw0 / DieDMAProtection
  ☆22Updated last year
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆20Updated 2 years ago
• 0mWindyBug / PnpNotifyResearch
  a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification
  ☆11Updated last year
• alal4465 / Practical-Reverse-Engineering-Solutions
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Updated 3 years ago
• Nitr0-G / PeVisor
  A project on the Unicorn emulator to emulate the code of Pe files in windows
  ☆21Updated 8 months ago
• backengineering / vmhook
  A demonstration of hooking into the VMProtect-2 virtual machine
  ☆19Updated last year
• ZEROWyt / Patchguard-2023
  ☆24Updated last year
• zodiacon / KObjects
  Sample for Creating a new kernel object type and supporting API
  ☆24Updated 8 months ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆66Updated last year
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated 2 years ago
• 1401199262 / HookHvcallCodeVa
  ☆22Updated 2 years ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆22Updated last year
• Midi12 / whse
  WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API
  ☆22Updated 3 years ago
• emlinhax / DbgViewEx
  combine the power of procmon and dbgview into one single application
  ☆8Updated last year
• kkent030315 / CiGetCertPublisherName
  An example code of CiGetCertPublisherName
  ☆15Updated 3 years ago
• nanabingies / CVE-2021-21551
  Dell Driver EoP (CVE-2021-21551)
  ☆25Updated 2 years ago
• keowu / winsystemprogramming
  Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.
  ☆10Updated 2 years ago
• christianshub / process-injection-guard
  Signature scanner and API hooks to detect malicious process injection
  ☆27Updated 2 years ago
• ch3rn0byl / CVE-2021-21551
  ☆26Updated 3 years ago
• ioncodes / pooldump
  ☆29Updated 3 years ago
• addrianyy / asmlib_x64
  x64 assembler library
  ☆31Updated 11 months ago
• SHA-MRIZ / FsMinfilterHooking
  ☆31Updated 4 years ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆24Updated 3 years ago
• 1401199262 / HookSwapContext
  ☆29Updated 2 years ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 7 years ago
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated 2 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆38Updated 2 years ago