Alternatives and similar repositories for DdiMon

Users that are interested in DdiMon are comparing it to the libraries listed below

• tandasat / HyperPlatform

  View on GitHub
  Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
  ☆1,726Nov 24, 2023Updated 2 years ago
• DarthTon / HyperBone

  View on GitHub
  Minimalistic VT-x hypervisor with hooks
  ☆925Oct 18, 2019Updated 6 years ago
• wbenny / hvpp

  View on GitHub
  hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system
  ☆1,284Mar 15, 2021Updated 4 years ago
• changeofpace / VivienneVMM

  View on GitHub
  VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.
  ☆820Sep 7, 2020Updated 5 years ago
• Gbps / gbhv

  View on GitHub
  Simple x86-64 VT-x Hypervisor with EPT Hooking
  ☆949Apr 24, 2023Updated 2 years ago
• everdox / InfinityHook

  View on GitHub
  Hook system calls, context switches, page faults and more.
  ☆2,631May 9, 2023Updated 2 years ago
• can1357 / ByePg

  View on GitHub
  Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
  ☆901Nov 21, 2019Updated 6 years ago
• 9176324 / Shark

  View on GitHub
  Turn off PatchGuard in real time for win7 (7600) ~ later
  ☆1,038Apr 21, 2022Updated 3 years ago
• tandasat / SimpleSvmHook

  View on GitHub
  SimpleSvmHook is a research purpose hypervisor for Windows on AMD processors.
  ☆460Feb 18, 2021Updated 4 years ago
• iPower / KasperskyHook

  View on GitHub
  Hook system calls on Windows by using Kaspersky's hypervisor
  ☆1,272Apr 1, 2024Updated last year
• HoShiMin / Kernel-Bridge

  View on GitHub
  Windows kernel hacking framework, driver template, hypervisor and API written on C++
  ☆1,802Nov 12, 2023Updated 2 years ago
• KelvinMsft / kHypervisor

  View on GitHub
  kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x
  ☆443Nov 29, 2021Updated 4 years ago
• tandasat / MemoryMon

  View on GitHub
  Detecting execution of kernel memory where is not backed by any image file
  ☆262Jul 11, 2018Updated 7 years ago
• wbenny / injdrv

  View on GitHub
  proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC
  ☆1,269May 1, 2024Updated last year
• mrexodia / TitanHide

  View on GitHub
  Hiding kernel-driver for x86/x64.
  ☆2,609Sep 2, 2025Updated 5 months ago
• Mattiwatti / EfiGuard

  View on GitHub
  Disable PatchGuard and Driver Signature Enforcement at boot time
  ☆2,242Aug 3, 2025Updated 6 months ago
• crvvdev / MasterHide

  View on GitHub
  A x64 Windows Rootkit using SSDT or Hypervisor hook
  ☆564Jan 4, 2025Updated last year
• hzqst / Syscall-Monitor

  View on GitHub
  Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+
  ☆747Jun 26, 2017Updated 8 years ago
• hfiref0x / UPGDSED

  View on GitHub
  Universal PatchGuard and Driver Signature Enforcement Disable
  ☆864Mar 29, 2019Updated 6 years ago
• DarthTon / Blackbone

  View on GitHub
  Windows memory hacking library
  ☆5,343Jan 26, 2024Updated 2 years ago
• stonedreamforest / Mirage

  View on GitHub
  kernel-mode Anti-Anti-Debug plugin. based on intel vt-x && ept technology
  ☆443Oct 30, 2020Updated 5 years ago
• tandasat / PgResarch

  View on GitHub
  PatchGuard Research
  ☆304Oct 6, 2018Updated 7 years ago
• hfiref0x / KDU

  View on GitHub
  Kernel Driver Utility
  ☆2,402Jan 11, 2026Updated last month
• Zero-Tang / NoirVisor

  View on GitHub
  The Grimoire Hypervisor solution for x86 Processors with experimental nested virtualization support. Remastering with Rust in progress.
  ☆606Feb 1, 2026Updated 2 weeks ago
• Air14 / HyperHide

  View on GitHub
  Hypervisor based anti anti debug plugin for x64dbg
  ☆1,550Jul 8, 2024Updated last year
• zhuhuibeishadiao / PFHook

  View on GitHub
  Page fault hook use ept (Intel Virtualization Technology)
  ☆200Oct 19, 2016Updated 9 years ago
• anzelesnik / SyscallHook

  View on GitHub
  System call hook for Windows 10 20H1
  ☆496Jun 26, 2021Updated 4 years ago
• vmcall / dxgkrnl_hook

  View on GitHub
  C++ graphics kernel subsystem hook
  ☆560Jan 11, 2021Updated 5 years ago
• swwwolf / wdbgark

  View on GitHub
  WinDBG Anti-RootKit Extension
  ☆645Jul 29, 2020Updated 5 years ago
• HyperDbg / HyperDbg

  View on GitHub
  State-of-the-art native debugging tools
  ☆3,627Updated this week
• tandasat / EopMon

  View on GitHub
  Elevation of privilege detector based on HyperPlatform
  ☆124Mar 5, 2017Updated 8 years ago
• Air14 / airhv

  View on GitHub
  Simple Intel VT-x hypervisor
  ☆359Dec 10, 2023Updated 2 years ago
• btbd / access

  View on GitHub
  Access without a real handle
  ☆1,034Apr 10, 2021Updated 4 years ago
• hfiref0x / SyscallTables

  View on GitHub
  Windows NT Syscall tables
  ☆1,384Dec 31, 2025Updated last month
• JKornev / hidden

  View on GitHub
  🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
  ☆2,004Jul 13, 2022Updated 3 years ago
• ExpLife0011 / awesome-windows-kernel-security-development

  View on GitHub
  windows kernel security development
  ☆2,054Sep 6, 2022Updated 3 years ago
• tandasat / GuardMon

  View on GitHub
  Hypervisor based tool for monitoring system register accesses.
  ☆153Sep 13, 2018Updated 7 years ago
• changeofpace / Self-Remapping-Code

  View on GitHub
  This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemo…
  ☆631Mar 19, 2019Updated 6 years ago
• HoShiMin / HookLib

  View on GitHub
  The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support
  ☆759Apr 24, 2025Updated 9 months ago