Detects virtual machines and malware analysis environments
☆146Oct 18, 2022Updated 3 years ago
Alternatives and similar repositories for Hypervisor-Detection
Users that are interested in Hypervisor-Detection are comparing it to the libraries listed below
Sorting:
- Kernel driver for detecting Intel VT-x hypervisors.☆197Jul 11, 2023Updated 2 years ago
- 🪝 Various EPT hook detection approaches☆143Updated this week
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆36Dec 17, 2025Updated 2 months ago
- kernel mode anti cheat☆637Aug 4, 2024Updated last year
- A mapper that maps shellcode into loaded large page drivers☆324Apr 26, 2022Updated 3 years ago
- A simple python script to check evil Visual Studio projects☆21Oct 13, 2023Updated 2 years ago
- a monitoring windows driver calls kernel api tools☆126Jul 5, 2024Updated last year
- Me fockin' pe protector☆45Nov 19, 2022Updated 3 years ago
- Collection of hypervisor detections☆296Sep 25, 2024Updated last year
- EDR PoC WIP LLC☆10Feb 9, 2024Updated 2 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆234Apr 2, 2022Updated 3 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆268Aug 31, 2022Updated 3 years ago
- Cheat for my own game SecureGame which uses a bootkit to hyperjack Hyper-V in order to access VBS enclave's memory☆103Dec 8, 2024Updated last year
- A demonstration of hooking into the VMProtect-2 virtual machine☆24Nov 9, 2023Updated 2 years ago
- Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`☆23Feb 10, 2024Updated 2 years ago
- etw hook (syscall/infinity hook) compatible with the latest Windows version of PG☆324Apr 27, 2024Updated last year
- ☆223Mar 11, 2023Updated 2 years ago
- protector & obfuscator & code virtualizer☆679Updated this week
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆297Dec 10, 2025Updated 2 months ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Apr 13, 2023Updated 2 years ago
- Lightweight Intel VT-x Hypervisor.☆661Dec 17, 2024Updated last year
- ☆360May 11, 2025Updated 9 months ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆382Aug 8, 2021Updated 4 years ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated 10 months ago
- ☆307May 11, 2023Updated 2 years ago
- Example driver on how to use SKLib☆70Nov 20, 2024Updated last year
- Hardware ID☆66Apr 21, 2022Updated 3 years ago
- ☆18Jan 11, 2026Updated last month
- Standard Kernel Library for Windows manipulation in C++☆199Jun 18, 2025Updated 8 months ago
- windows kernel pagehook☆41Oct 30, 2022Updated 3 years ago
- Reimplementation of Microsoft's Warbird obuscator☆203Jun 24, 2024Updated last year
- How Meltdown and Spectre haunt Anti-Cheat: DVRT details☆22Aug 21, 2024Updated last year
- VMProtect, VMP, Devirter, 3,5☆112Jan 30, 2023Updated 3 years ago
- Rusty Hypervisor - Windows UEFI Blue Pill Type-1 Hypervisor in Rust (Codename: Illusion)☆340Aug 31, 2024Updated last year
- An x86-64 Code Virtualizer☆304Sep 26, 2024Updated last year
- Manual mapper that uses PTE manipulation, Virtual Address Descriptor (VAD) manipulation, and forceful memory allocation to hide executabl…☆385Jan 29, 2022Updated 4 years ago
- Turn off PatchGuard in real time for win7 (7600) ~ later☆1,037Apr 21, 2022Updated 3 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆386Jul 6, 2022Updated 3 years ago
- Demo proof of concept for shadow regions, and implementation of HyperDeceit.☆314May 31, 2023Updated 2 years ago