Alternatives and similar repositories for bluepillstudy

Users that are interested in bluepillstudy are comparing it to the libraries listed below

• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆39Updated 6 years ago
• denisvieriu / Bare-Metal-Lightweight-Hypervisor
  ☆13Updated 5 years ago
• StrikerX3 / haxmclient
  HAXM hypervisor client
  ☆18Updated 7 years ago
• 9176324 / SyscallTable
  ☆34Updated 7 years ago
• NtRaiseHardError / Providence
  Kernel-mode file scanner
  ☆19Updated 7 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 3 years ago
• KelvinMsft / ScreenCapAttack
  ☆36Updated 5 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆38Updated 4 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 7 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27Updated 11 years ago
• AzureGreen / WinNT-Learning
  Notes my learning steps about Windows-NT
  ☆23Updated 8 years ago
• npbool / vmxice
  Kernel debugger using Intel VT-x. Designed to be compatible with linux, ucore, windows.
  ☆28Updated 12 years ago
• zer0mem / HowToBoostPatchGuard
  more at http://www.zer0mem.sk/?p=271
  ☆12Updated 12 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 10 years ago
• lololosys / TitanHideWindbgPlugin-
  ☆14Updated 8 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆44Updated 8 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆66Updated 5 years ago
• KelvinMsft / Perfvisor
  init
  ☆14Updated 5 years ago
• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆53Updated last year
• KelvinMsft / SyncJobs_MPSystem
  ☆14Updated 7 years ago
• Zurdo136 / OCD
  Windows Offline Crash Dump
  ☆17Updated 3 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 9 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆24Updated 10 years ago
• ZaneLogi / DevConWin
  A tool to investigate the Windows device manager
  ☆13Updated 6 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• Fliggibish / RansomwareDetector
  ☆12Updated 8 years ago
• kernweak / Syscall-Monitor
  大表哥的Syscall-Monitor
  ☆34Updated 6 years ago
• IgorKorkin / AllMemPro
  AllMemPro
  ☆46Updated 8 years ago
• MortenSchenk / Privilege_Shellcode
  Kernel Shellcode to add all privileges in token
  ☆15Updated 8 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago