Alternatives and similar repositories for icekit

Users that are interested in icekit are comparing it to the libraries listed below

• vmsplit / checkm8
  bypassing intel txt's tboot integrity checks via coreboot shim
  ☆82Updated 8 months ago
• 3intermute / ramiel
  uefi diskless persistence technique + OVMF secureboot bypass
  ☆94Updated last year
• lil-skelly / basilisk
  ☆14Updated 8 months ago
• connormcgarr / Vtl1Mon
  Virtual Trust Level (VTL 1) secure call tracing
  ☆83Updated 3 months ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Updated 7 months ago
• symeonp / Lenovo-CVE-2025-8061
  PoC for popping a system shell against the LnvMSRIO.sys driver
  ☆113Updated last month
• floesen / KExecDD
  Admin to Kernel code execution using the KSecDD driver
  ☆260Updated last year
• djolertrk / kovid-obfuscation-passes
  A set of LLVM and GCC based plugins that perform code obfuscation.
  ☆133Updated last month
• TheMalwareGuardian / Bootkits-Rootkits-Development-Environment
  Automated environment setup for Bootkit & Rootkit development.
  ☆25Updated 3 months ago
• dmaivel / ntoseye
  Windows kernel debugger for Linux hosts running Windows under KVM/QEMU
  ☆99Updated 6 months ago
• Idov31 / EtwLeakKernel
  Leaking kernel addresses from ETW consumers. Requires Administrator privileges.
  ☆85Updated 3 weeks ago
• Sh3lldon / WinPWN
  This repo for Windows x32-x64 Kernel/User Mode Exploitation writeups and exploits
  ☆24Updated last month
• Idov31 / NovaHypervisor
  NovaHypervisor is a defensive x64 Intel host based hypervisor. The goal of this project is to protect against kernel based attacks (eithe…
  ☆234Updated last month
• Slowerzs / KeyJumper
  ☆51Updated 8 months ago
• micREsoft / SysCaller
  SysCaller: SDK for WindowsAPI via syscalls. Dynamic Resolution, Obfuscation, Multi-Language Bindings, & more!
  ☆50Updated last week
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆117Updated last year
• husseinmuhaisen / Hypervisor
  A comprehensive Hypervisor resources repo
  ☆183Updated 3 weeks ago
• badhive / alca
  Rule Engine for Dynamic Malware Analysis and Research
  ☆25Updated 7 months ago
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆121Updated 11 months ago
• li4321 / selfmovingdll
  ☆25Updated 11 months ago
• badhive / stitch
  Rewrite and obfuscate code in compiled binaries
  ☆266Updated last month
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆114Updated 2 years ago
• exploits-forsale / 24h2-nt-exploit
  Exploit targeting NT kernel in 24H2 Windows Insider Preview
  ☆147Updated last year
• XaFF-XaFF / Kernel-Process-Hollowing
  Windows x64 kernel mode rootkit process hollowing POC.
  ☆189Updated 2 years ago
• therealdreg / masm32-kernel-programming
  masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)
  ☆126Updated 2 years ago
• ic3qu33n / OffensiveCon24-uefi-task-of-the-translator
  OffensiveCon 2024 Repo, contains PoCs and materials for talk "UEFI and the Task of the Translator"
  ☆43Updated last year
• ic3qu33n / REcon2024-GOP-Complex
  REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""
  ☆14Updated 8 months ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆119Updated 2 years ago
• exploits-forsale / prefetch-tool
  Windows KASLR bypass using prefetch side-channel
  ☆164Updated last year
• winterknife / EVENSTAR
  Intel 64/Windows low-level experiments
  ☆62Updated 3 months ago