bootkit驱动映射，三环进程注入加载指定模块
☆16Oct 8, 2024Updated 2 years ago
Alternatives and similar repositories for UGuardMap
Users that are interested in UGuardMap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11Nov 5, 2025Updated 11 months ago
- pg bypass for win10-win11 (learn from NP)☆17Oct 28, 2025Updated last year
- ☆10Apr 27, 2024Updated 2 years ago
- ☆32Apr 2, 2026Updated 7 months ago
- windows rootkit☆60May 2, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tiny tool to strip the debug info from Windows binary files.☆11Mar 16, 2022Updated 4 years ago
- ☆14Mar 13, 2023Updated 3 years ago
- Exemplary LLVM function pass implementing Control Flow Flattening.☆17May 2, 2018Updated 8 years ago
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆66Dec 30, 2025Updated 10 months ago
- A working version of this tutorial: https://docs.microsoft.com/en-us/windows/desktop/rpc/tutorial☆15Jun 22, 2019Updated 7 years ago
- AMD-V nested hypervisor research driver for Windows: NPT virtualization, NPT hooks, CR3 protection suite, X-deny syscall sensing + behavi…☆17Updated this week
- An example code of CiGetCertPublisherName☆15Mar 24, 2022Updated 4 years ago
- A simple UEFI bootkit made by @NSG650 and me.☆29Dec 29, 2024Updated last year
- ntoskrnl .data hooks for UM-KM communication☆53May 26, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 带后门，自测☆25Jun 4, 2025Updated last year
- Fuzzing Harness and Unpatched Crash Results from Fuzzing Defender MpEngine☆47Jul 29, 2025Updated last year
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- wfp2socks☆17Oct 8, 2026Updated 3 weeks ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆189May 17, 2023Updated 3 years ago
- Clr Injection for x64 and x86. Inject C# into Managed or Unmanaged Processes.☆18Sep 7, 2024Updated 2 years ago
- White-box analytic framework based on LLVM☆38Jun 10, 2019Updated 7 years ago
- Repository of different kernel drivers written while studying Windows NT Driver development☆12Apr 14, 2024Updated 2 years ago
- Create a portable and minimized MSVC compilation environment, including x86/x64/cl/clang, etc.☆12Mar 14, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Little tool and (header-only lib) to investigate Windows Internals. Shout out to @zodiacon. No pull requests (this is actually a mirrored…☆13Nov 10, 2025Updated 11 months ago
- VTable dumper for IDA 7.7+☆20Jun 19, 2025Updated last year
- shellcode生成框架☆93Jul 11, 2024Updated 2 years ago
- ☆12Oct 24, 2022Updated 4 years ago
- https://www.huorong.cn/☆18Apr 16, 2024Updated 2 years ago
- x64 assembler library☆31Jun 7, 2024Updated 2 years ago
- ☆48Sep 25, 2024Updated 2 years ago
- Standard Kernel Library for Windows manipulation in C++☆224Jun 18, 2025Updated last year
- A poc that abuses Enclave☆40Sep 8, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Proof of Concept CVE-2025-24990 (Agere Systems's driver)☆58Oct 31, 2025Updated last year
- 针对《解密家用路由器0day漏洞挖掘技术》一书的相关笔记☆18Oct 12, 2020Updated 6 years ago
- ☆11Feb 19, 2023Updated 3 years ago
- The sequel to Voyager☆117Aug 21, 2024Updated 2 years ago
- Demonstrates that NvAPI_D3D11_WksReadScanout (undocumented, interface 0xBCB1C536) can read the GPU scanout buffer directly, bypassing any…☆99Mar 8, 2026Updated 7 months ago
- A small tool to unmap PE memory dumps.☆11Nov 9, 2023Updated 2 years ago
- ☆35Dec 15, 2023Updated 2 years ago