Alternatives and similar repositories for atrk-win

Users that are interested in atrk-win are comparing it to the libraries listed below

• feiniao112 / DectctHideProcess

  View on GitHub
  Linux下进程隐藏检测与定位工具
  ☆17Nov 2, 2024Updated last year
• threatexpert / SooRDP

  View on GitHub
  socks proxy over RDP隧道工具，基于Windows远程桌面客户端插件接口，实现端口转发
  ☆24Apr 25, 2025Updated 9 months ago
• yinsel / CVE-2024-35250-BOF

  View on GitHub
  CVE-2024-35250 的 Beacon Object File (BOF) 实现。
  ☆24Nov 28, 2024Updated last year
• MM0x02 / RSS-Push

  View on GitHub
  ☆14Updated this week
• Nitr0-G / DriverLoader

  View on GitHub
  it's a driver injector or driver loader header lib(Windows)
  ☆12Aug 5, 2023Updated 2 years ago
• b1-team / dll-hijack

  View on GitHub
  Dll hijack -- just one macro
  ☆12Jul 3, 2023Updated 2 years ago
• kouzhudong / InjectDll

  View on GitHub
  Inject dll to process in driver
  ☆10Aug 27, 2024Updated last year
• huafuge / MemoryLoadDll

  View on GitHub
  内存加载DLL 支持VMP最大加密
  ☆12Aug 11, 2020Updated 5 years ago
• Shad0wB1ackCat / AntiCheat

  View on GitHub
  A simple DLL injection protection driver.
  ☆12Dec 21, 2020Updated 5 years ago
• Chuyu-Team / phnt

  View on GitHub
  Native API header files for the Process Hacker project.
  ☆15Mar 1, 2023Updated 2 years ago
• LDrakura / CVE-Monitor

  View on GitHub
  GitHubApi CVE Poc监控工具
  ☆14Jan 23, 2026Updated 3 weeks ago
• Arcueld / VoidWalker

  View on GitHub
  常见反沙箱反虚拟机总结
  ☆20Nov 13, 2024Updated last year
• latortuga71 / GoPsExec

  View on GitHub
  Basic Psexec clone, but in golang.
  ☆16Jul 2, 2022Updated 3 years ago
• je5442804 / NtCreateUserProcess-Post

  View on GitHub
  NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version
  ☆43Jul 16, 2024Updated last year
• zengfr / idaemu

  View on GitHub
  idaemu is an IDA Pro Plugin - use for emulating code in IDA Pro.update for ida pro 7.7
  ☆16Nov 9, 2023Updated 2 years ago
• smallzhong / kernel_monitor

  View on GitHub
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆69Nov 19, 2025Updated 2 months ago
• Oliver-1-1 / EtwKeyboardDetection

  View on GitHub
  ☆37Sep 26, 2024Updated last year
• he4rtbleed / PPLL

  View on GitHub
  Protected Process Light Library
  ☆18Jun 20, 2020Updated 5 years ago
• IcEy-999 / MyOpenSSL

  View on GitHub
  通过重造轮子和调用OpenSSL的方式学习密码！！
  ☆15Jan 28, 2023Updated 3 years ago
• singlefreshBird / Rootkit

  View on GitHub
  Rookit and anti rookit on Windows platform
  ☆14Apr 30, 2024Updated last year
• backengineering / CheckEvilSln

  View on GitHub
  A simple python script to check evil Visual Studio projects
  ☆21Oct 13, 2023Updated 2 years ago
• kN6jq / WoodpeckerPluginManager

  View on GitHub
  Woodpecker模板项目,方便创建新插件
  ☆14Jul 25, 2024Updated last year
• Binklac / BACWindows

  View on GitHub
  An anti-cheat project that includes kernel mode.
  ☆39Jul 29, 2021Updated 4 years ago
• kanren3 / libalpc

  View on GitHub
  ☆19Oct 25, 2024Updated last year
• BlWasp / WDSFinder

  View on GitHub
  A simple tool to identify WDS servers in Active Directory
  ☆32Aug 25, 2025Updated 5 months ago
• howmp / zigshellcode

  View on GitHub
  ☆18May 6, 2025Updated 9 months ago
• Oxygen1a1 / DrvMon

  View on GitHub
  a monitoring windows driver calls kernel api tools
  ☆126Jul 5, 2024Updated last year
• Vicshann / PEProtectDrv

  View on GitHub
  Some crazy PE executables protection kernel driver
  ☆20May 2, 2020Updated 5 years ago
• BerkanYildiz / LoggerNT

  View on GitHub
  Logging library for kernel drivers written for the Windows NT operating system.
  ☆21Oct 17, 2025Updated 4 months ago
• alfarom256 / PebLdr

  View on GitHub
  ☆15Dec 16, 2020Updated 5 years ago
• mapozyan / etw_hook

  View on GitHub
  etw hook (syscall/infinity hook) compatible with the latest Windows version of PG
  ☆22Sep 11, 2024Updated last year
• huoji120 / mbnsc

  View on GitHub
  通过分析流量,快速检查手机是否被APT攻击
  ☆35Oct 19, 2025Updated 3 months ago
• DragonQuestHero / Medusa

  View on GitHub
  Radical Windows ARK
  ☆251Apr 18, 2025Updated 9 months ago
• Whitebird0 / Windows-kernel-learning-notes

  View on GitHub
  ☆17Apr 9, 2022Updated 3 years ago
• freakanonymous / DLL_ROOTKIT_loader

  View on GitHub
  Rootkit loader for your rootkit dll, x86/x64 system wide DLL injection (+appinit_dlls registry create) uses heavens gate
  ☆22Jan 28, 2021Updated 5 years ago
• mai-lang-chai / Sysinternals

  View on GitHub
  微软开发的系统管理小工具-简约教程-含渗透利器
  ☆21Sep 27, 2019Updated 6 years ago
• Sentient111 / StealingSignatures

  View on GitHub
  Stealing signatures from pe files
  ☆15Apr 1, 2025Updated 10 months ago
• 1027565 / InstrumentationCallbacks

  View on GitHub
  A native Windows library for intercepting kernel-to-user transitions using instrumentation callbacks
  ☆28Feb 3, 2024Updated 2 years ago
• wanttobeno / KProtect

  View on GitHub
  Driver protect 驱动保护
  ☆46Apr 23, 2020Updated 5 years ago