Alternatives and similar repositories for hidden_syscall_monitoring

Users that are interested in hidden_syscall_monitoring are comparing it to the libraries listed below

• backengineering / pdbgen2
  Generate a PDB file given the old PDB file and an address mapping
  ☆51Updated 6 months ago
• SamuelTulach / SecureGame
  Proof-of-concept game using VBS enclaves to protect itself from cheating
  ☆49Updated last year
• momo5502 / patch-finder
  🔬 IDA plugin to find patched memory
  ☆83Updated 3 weeks ago
• zx0CF1 / shredder-rs
  A high-fidelity x86_64 polymorphic mutation engine focused on instruction-level fragmentation and context preservation.
  ☆107Updated 3 weeks ago
• jonomango / pe-builder
  Header-only C++ library for producing PE files.
  ☆34Updated 2 years ago
• connormcgarr / SkBridge
  Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1
  ☆71Updated 5 months ago
• android1337 / brkida
  C++ macro for x64 programs that breaks ida hex-rays decompiler tool.
  ☆137Updated last year
• FunnyWhaleDev / AlterLoadDll
  Load dll with undocumented functions and debug symbols
  ☆47Updated last year
• AmitMoshel1 / PatchGuardEncryptorDriver
  A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.
  ☆78Updated 10 months ago
• KiFilterFiberContext / warbird-obfuscator
  Integration of Microsoft Warbird with the MSVC compiler
  ☆127Updated 2 years ago
• milankovo / zydisinfo
  ☆31Updated 3 weeks ago
• m417z / x64dbg-symbol-tldr
  An x64dbg plugin which helps make sense of long C++ symbols
  ☆59Updated 2 years ago
• Fatmike-GH / Fatpack
  A Windows PE packer for executables (x64) with LZMA compression and with full TLS (Thread Local Storage) support.
  ☆94Updated 3 months ago
• 0x1c1101 / blazing_asm
  Simple, fast and lightweight Header-Only C++ Assembler Library
  ☆132Updated 5 months ago
• djolertrk / kovid-obfuscation-passes
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆138Updated 3 months ago
• brew02 / BudgetEPT
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆60Updated last year
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆38Updated 2 years ago
• GetRektBoy724 / warbird-research
  Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)
  ☆89Updated 3 months ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆96Updated 10 months ago
• keowu / Ryujin
  Ryūjin Protector - Is a Intel Arch - BIN2BIN - PE Obfuscation/Protection/DRM tool
  ☆300Updated 2 months ago
• backengineering / vmp2
  VMProtect2 Deobfuscation Tooling
  ☆84Updated 2 months ago
• Mowokuma / vm_str.hpp
  vm_str.hpp is a header only string obfuscator.
  ☆103Updated 5 months ago
• 0mWindyBug / DataptrHooks
  ntoskrnl .data hooks for UM-KM communication
  ☆53Updated last year
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆44Updated 2 years ago
• worawit / malk
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆79Updated 3 years ago
• namazso / dll-universal-patcher
  A universal binary patching dll.
  ☆117Updated last year
• wesmar / KernelResearchKit
  Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by s…
  ☆75Updated last month
• lennyRBLX / ret_addr_spoofer
  Compileable POC of namazso's x64 return address spoofer.
  ☆50Updated 5 years ago
• Peribunt / VPGATHER
  Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …
  ☆52Updated last month
• connormcgarr / Vtl1Mon
  Virtual Trust Level (VTL 1) secure call tracing
  ☆86Updated 5 months ago