A minimal CR3 protection PoC (KdpTrap hook)
☆17Jan 25, 2025Updated last year
Alternatives and similar repositories for Win-Kernel-CR3Protect
Users that are interested in Win-Kernel-CR3Protect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A lock-free, high-performance logging system designed for Windows kernel drivers☆26Mar 11, 2025Updated last year
- Emulate Drivers in RING3 with self context mapping or unicorn☆21Jan 1, 2025Updated last year
- Hyperspace is a multi-purpose tool for Emulating, Injecting, Dumping and Externals.☆58Jun 10, 2026Updated last month
- A intel hypervisor, implementing many virtualization techniques☆54Apr 24, 2023Updated 3 years ago
- ☆20Apr 14, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- UEFI Bootkit that infects kernel with backdoor using SSDT hook☆28Jul 9, 2025Updated last year
- ☆21Oct 12, 2024Updated last year
- Hijacking Hyper-V at Runtime with DDMA☆148Aug 13, 2025Updated 11 months ago
- PointerGuard is a proof-of-concept tool used to create 'guarded' pointers which disguise pointer addresses, monitor reads/writes, and pre…☆58May 23, 2022Updated 4 years ago
- detect hypervisor with Nmi Callback☆41Sep 25, 2022Updated 3 years ago
- Analyze tool for windows reverser☆32Mar 6, 2023Updated 3 years ago
- Shows an example of how to implement VT-d/AMD-Vi on Windows☆182Sep 22, 2023Updated 2 years ago
- A basic demonstration of directly overwriting paging structures for physical memory r/w and interprocess memory copy☆104Jun 26, 2023Updated 3 years ago
- UD overlay using SetWindowsHookEx☆16Apr 29, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Rust unsafe bindings for Vid API (Hyper-V)☆24Feb 23, 2025Updated last year
- ☆17Apr 21, 2022Updated 4 years ago
- hook KeyboardClassServiceCallback to prevent messing up sistema☆26Nov 14, 2023Updated 2 years ago
- Windows x64 DLL/Driver manual map injection on a non-present PML4E using physical memory read/writes, direct page table manipulation and …☆107Sep 28, 2025Updated 9 months ago
- POC about how to detect windows kernel debug by pool tag.☆13Nov 29, 2023Updated 2 years ago
- hook system call that on user mode☆12Jan 27, 2022Updated 4 years ago
- Windows kernel drivers simple HTTP library for modern C++☆40Jul 12, 2018Updated 8 years ago
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆97Jul 7, 2025Updated last year
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆66Oct 19, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- IDA plugin to support automatic reverse engineering☆82Feb 28, 2025Updated last year
- VT Hook☆57May 3, 2026Updated 2 months ago
- manual map unsigned driver over signed memory☆229Apr 11, 2024Updated 2 years ago
- Self-hosting binary instrumentation framework for security research☆12Apr 10, 2023Updated 3 years ago
- ☆18Jan 11, 2026Updated 6 months ago
- Cracking MBAs☆52Updated this week
- A C++ wrapper for windows pipes.☆22Apr 17, 2019Updated 7 years ago
- ☆50Feb 21, 2022Updated 4 years ago
- x86-64 user mode emulation using Zydis☆78Mar 15, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆27Apr 5, 2026Updated 3 months ago
- Control Flow Linearization☆26May 4, 2025Updated last year
- Using CVE-2021-40449 to manual map kernel mode driver☆103Mar 5, 2022Updated 4 years ago
- Ghetto user mode emulation of Windows kernel drivers.☆163Oct 20, 2024Updated last year
- Kernel driver for detecting Intel VT-x hypervisors.☆203Jul 11, 2023Updated 3 years ago
- micro lua☆26Apr 7, 2026Updated 3 months ago
- Reverse of MSI's MAG X670E TOMAHAWK WIFI bios v1KB (2026-03-20) which claims "Implemented the anti-cheat mechanism" in the release notes.☆16May 18, 2026Updated 2 months ago