Alternatives and similar repositories for recon2024_demo

Users that are interested in recon2024_demo are comparing it to the libraries listed below

• tandasat / CVE-2024-21305

  View on GitHub
  Report and exploit of CVE-2024-21305.
  ☆40Jan 14, 2024Updated 2 years ago
• namazso / msvcrt.lib

  View on GitHub
  .lib file for linking against the NT CRT
  ☆18Mar 18, 2022Updated 3 years ago
• carlos-al / user-kernel-syscall-hook

  View on GitHub
  ☆93Jun 3, 2024Updated last year
• xu-Wan / HypercallPageHook

  View on GitHub
  POC Hook of nt!HvcallCodeVa
  ☆54May 8, 2023Updated 2 years ago
• idkhow2usethis / EdgyBot-Remastered

  View on GitHub
  EdgyBot: A partially AFK Edgenuity Bot brought to you by EdgePlus+. Works on 99% of assignments offered by Edgenuity. It does all non tes…
  ☆22Jan 27, 2024Updated 2 years ago
• ByteWhite1x1 / Driver-DKOM

  View on GitHub
  An advanced DKOM for drivers with "DRIVER_OBJECT"
  ☆22Feb 19, 2023Updated 2 years ago
• worawit / malk

  View on GitHub
  Demonstrate calling a kernel function and handle process creation callback against HVCI
  ☆79Dec 21, 2022Updated 3 years ago
• jjensn / CVE-2024-36877

  View on GitHub
  Exploit POC for CVE-2024-36877
  ☆48Aug 14, 2024Updated last year
• iqrw0 / DieDMAProtection

  View on GitHub
  ☆29Mar 9, 2024Updated last year
• emlinhax / dse_hook

  View on GitHub
  load unsigned kernel-driver by patching dse in 248 lines
  ☆142Mar 22, 2024Updated last year
• stuxnet147 / Known-Driver-Mappers

  View on GitHub
  ☆12Jul 12, 2022Updated 3 years ago
• depletionmode / VirtualAllocSecure

  View on GitHub
  ☆18Feb 6, 2019Updated 7 years ago
• ekknod / efi-monitor

  View on GitHub
  just proof of concept. hooking MmCopyMemory PG safe.
  ☆82Nov 13, 2023Updated 2 years ago
• gerhart01 / Hyper-V-Tools

  View on GitHub
  Different tools for Microsoft Hyper-V researching
  ☆64Feb 8, 2026Updated last week
• singlefreshBird / Rootkit

  View on GitHub
  Rookit and anti rookit on Windows platform
  ☆14Apr 30, 2024Updated last year
• backengineering / VDM

  View on GitHub
  Library to manipulate drivers that expose a physical memory read/write primitive.
  ☆39Sep 4, 2023Updated 2 years ago
• 0mWindyBug / WFPCalloutReserach

  View on GitHub
  research revolving the windows filtering platform callout mechanism
  ☆39May 26, 2024Updated last year
• can1357 / hvdetecc

  View on GitHub
  Collection of hypervisor detections
  ☆296Sep 25, 2024Updated last year
• nulledc0de / phantom_thread

  View on GitHub
  POC kernel driver with hidden system thread
  ☆13May 14, 2024Updated last year
• DaedalusFrame / Nemesis

  View on GitHub
  Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…
  ☆36Dec 17, 2025Updated 2 months ago
• Hxnter999 / vmm

  View on GitHub
  Simple and lightweight hypervisor for AMD processors
  ☆44Oct 25, 2025Updated 3 months ago
• shareef12 / driveranalyzer

  View on GitHub
  Binary Ninja plugin to perform automated analysis of Windows drivers
  ☆20Aug 8, 2019Updated 6 years ago
• zer0condition / GDRVLib

  View on GitHub
  Virtual and physical memory hacking library using gigabyte vulnerable driver
  ☆71Apr 9, 2023Updated 2 years ago
• expend20 / DrSymLogger

  View on GitHub
  ☆22Oct 18, 2023Updated 2 years ago
• TheCruZ / SigMaker-x64

  View on GitHub
  ☆23Oct 15, 2024Updated last year
• kotae4 / ntkernel-dev-notes

  View on GitHub
  ☆24May 26, 2021Updated 4 years ago
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• ghostbyt3 / WinDriver-EXP

  View on GitHub
  This repo contains PoCs for vulnerable Windows drivers.
  ☆128Dec 20, 2025Updated last month
• synctop / tpm-mmio

  View on GitHub
  Using MMIO (Memory-Mapped I/O) to read TPM 2.0 public Endorsement Key.
  ☆53May 29, 2024Updated last year
• xsh3llsh0ck / Deadwing

  View on GitHub
  SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.
  ☆118Oct 15, 2024Updated last year
• ByteWhite1x1 / PatchGuardResearch

  View on GitHub
  Bypassing kernel patch protection runtime
  ☆21Feb 19, 2023Updated 2 years ago
• ZEROWyt / Patchguard-2023

  View on GitHub
  ☆23Jul 24, 2023Updated 2 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• sireqpetr / aaaa

  View on GitHub
  <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en" xml:lang="en" class=…
  ☆10Jun 13, 2017Updated 8 years ago
• hasherezade / pe_unmapper

  View on GitHub
  Small tool to convert beteween the PE alignments (raw and virtual).
  ☆111Dec 28, 2022Updated 3 years ago
• 3a1 / Elysium

  View on GitHub
  UEFI Bootkit Framework that attacks boot-time Code Integrity
  ☆114Dec 15, 2025Updated 2 months ago
• HyperDbg / scripts

  View on GitHub
  A collection of useful HyperDbg scripts
  ☆27Aug 22, 2024Updated last year
• irql / nokd

  View on GitHub
  reverse engineering of the windows nt kernel debugger protocol & reimplementation.
  ☆36Jul 2, 2024Updated last year
• zer0condition / ZeroThreadKernel

  View on GitHub
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆159Apr 13, 2023Updated 2 years ago