Alternatives and similar repositories for bluepillstudy

Users that are interested in bluepillstudy are comparing it to the libraries listed below

• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆38Updated 6 years ago
• 9176324 / SyscallTable
  ☆33Updated 7 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 3 years ago
• StrikerX3 / haxmclient
  HAXM hypervisor client
  ☆17Updated 6 years ago
• NtRaiseHardError / Providence
  Kernel-mode file scanner
  ☆18Updated 7 years ago
• KelvinMsft / ScreenCapAttack
  ☆33Updated 4 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆23Updated 9 years ago
• MortenSchenk / Privilege_Shellcode
  Kernel Shellcode to add all privileges in token
  ☆14Updated 8 years ago
• denisvieriu / Bare-Metal-Lightweight-Hypervisor
  ☆13Updated 4 years ago
• DeDf / WProtect
  ☆41Updated 5 years ago
• KelvinMsft / Perfvisor
  init
  ☆14Updated 5 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 6 years ago
• lololosys / TitanHideWindbgPlugin-
  ☆14Updated 8 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆25Updated 11 years ago
• Nerlant / SyscallDumper
  ☆19Updated 6 years ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 7 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 4 years ago
• yuvatia / Win10GdiExploitation
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Updated 7 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• wanttobeno / IDAStealth-v1.3.3
  IDA反-反调试插件 IDAStealth v1.3.3, created 06/28/2011, Jan Newger
  ☆21Updated 7 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆29Updated 4 years ago
• IgorKorkin / AllMemPro
  AllMemPro
  ☆46Updated 7 years ago
• Fliggibish / RansomwareDetector
  ☆12Updated 7 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• ZaneLogi / DevConWin
  A tool to investigate the Windows device manager
  ☆14Updated 6 years ago
• DragonQuestHero / YouDontNeedInstallWDK
  You don't need install any wdk for development kernel driver
  ☆24Updated 7 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• OSRDrivers / penter
  penter hook example and driver time recorder
  ☆31Updated 7 years ago
• kkHAIKE / tinyidb
  Some python scripts are used to export userdata from huge idb(ida's database)，ida 7.0 support only
  ☆21Updated 6 years ago
• zer0mem / HowToBoostPatchGuard
  more at http://www.zer0mem.sk/?p=271
  ☆12Updated 12 years ago