Alternatives and similar repositories for Windows-Research-Kernel-Hacking

Users that are interested in Windows-Research-Kernel-Hacking are comparing it to the libraries listed below

• Fare9 / Windows-Internals
  My repository to upload drivers from different books and all the information related to windows internals.
  ☆163Updated 6 years ago
• gerhart01 / LiveCloudKd
  Hyper-V Research is trendy now
  ☆179Updated last week
• ionescu007 / hdk
  (unofficial) Hyper-V® Development Kit
  ☆232Updated last year
• eyalz800 / zpp_hypervisor
  A very simple hypervisor for learning experience.
  ☆147Updated 4 years ago
• 9176324 / WRK
  The Windows Research Kernel v1.2 contains the sources for the core of the Windows (NTOS) kernel and a build environment for a kernel that…
  ☆88Updated 7 years ago
• ionescu007 / Simpleator
  Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that w…
  ☆395Updated 7 years ago
• KelvinMsft / DeviceMon
  VT-based PCI device monitor (SPI)
  ☆157Updated 5 years ago
• tandasat / GuardMon
  Hypervisor based tool for monitoring system register accesses.
  ☆152Updated 7 years ago
• ainfosec / MoRE
  TLB splitting VMM
  ☆169Updated 9 years ago
• tandasat / DebugLogger
  A software driver that lets you log kernel-mode debug output into a file on Windows.
  ☆108Updated 7 years ago
• Fyyre / kerneldetective
  Kernel Detective
  ☆150Updated 3 years ago
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆181Updated 4 years ago
• sysprogs / VirtualKD
  ☆228Updated 4 years ago
• ZoloZiak / WinNT4
  Windows NT4 Kernel Source code
  ☆331Updated 14 years ago
• IgorKorkin / MemoryRanger
  MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…
  ☆230Updated 5 years ago
• x64dbg / GleeBug
  Debugging Framework for Windows.
  ☆1,197Updated 3 weeks ago
• tandasat / EopMon
  Elevation of privilege detector based on HyperPlatform
  ☆123Updated 8 years ago
• upring / virtdbg
  Automatically exported from code.google.com/p/virtdbg
  ☆99Updated 10 years ago
• repnz / simple-os
  Simple Protected Mode Kernel for i386
  ☆15Updated 6 years ago
• tandasat / MemoryMon
  Detecting execution of kernel memory where is not backed by any image file
  ☆261Updated 7 years ago
• zer0mem / MiniHyperVisorProject
  IntelVT-X nice feature -> tool
  ☆95Updated 11 years ago
• asamy / x86-64-pe-emu
  AMD64 PE Emulator in Python.
  ☆85Updated 2 years ago
• dishather / richprint
  Print compiler information stored in Rich Header of PE executables.
  ☆146Updated 2 weeks ago
• tandasat / UefiVarMonitor
  The runtime DXE driver monitoring access to the UEFI variables by hooking the runtime service table.
  ☆146Updated 5 years ago
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆244Updated last year
• msuiche / LiveCloudKd
  Hyper-V Research is trendy now
  ☆192Updated last year
• markhc / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆134Updated 9 years ago
• rmusser01 / hyperdbg
  Automatically exported from code.google.com/p/hyperdbg
  ☆109Updated 10 years ago
• Xyl2k / Xylitol-MASM32-snippets
  MASM32 Code collection for reverse engineers
  ☆158Updated 4 months ago
• m0n0ph1 / IAT-Hooking-Revisited
  Import address table (IAT) hooking is a well documented technique for intercepting calls to imported functions.
  ☆226Updated 7 years ago