Alternatives and similar repositories for bluepillstudy

Users that are interested in bluepillstudy are comparing it to the libraries listed below

• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆40Updated 6 years ago
• denisvieriu / Bare-Metal-Lightweight-Hypervisor
  ☆13Updated 5 years ago
• 9176324 / SyscallTable
  ☆34Updated 7 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆24Updated 10 years ago
• zer0mem / HowToBoostPatchGuard
  more at http://www.zer0mem.sk/?p=271
  ☆12Updated 12 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 6 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 3 years ago
• avalon1610 / LPC
  windows LPC library
  ☆43Updated 12 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 9 years ago
• KelvinMsft / Perfvisor
  init
  ☆14Updated 5 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆27Updated 11 years ago
• KelvinMsft / ScreenCapAttack
  ☆36Updated 5 years ago
• NtRaiseHardError / Providence
  Kernel-mode file scanner
  ☆19Updated 7 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆29Updated 12 years ago
• StrikerX3 / haxmclient
  HAXM hypervisor client
  ☆18Updated 7 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• hostzhen / sysark
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Updated 8 years ago
• michael4338 / TDI
  Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
  ☆36Updated 11 years ago
• gerronjo / openlibs
  Open Source Libraries Collection
  ☆24Updated 10 years ago
• 0cch / luadbg
  Lua Extension for Windbg
  ☆21Updated 7 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆37Updated 4 years ago
• Zurdo136 / OCD
  Windows Offline Crash Dump
  ☆17Updated 3 years ago
• KelvinMsft / SyncJobs_MPSystem
  ☆14Updated 7 years ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 8 years ago
• npbool / vmxice
  Kernel debugger using Intel VT-x. Designed to be compatible with linux, ucore, windows.
  ☆28Updated 12 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 5 years ago
• AzureGreen / WinNT-Learning
  Notes my learning steps about Windows-NT
  ☆23Updated 8 years ago
• IgorKorkin / AllMemPro
  AllMemPro
  ☆46Updated 8 years ago
• JaanusKaapPublic / BlogHyperV
  Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/
  ☆57Updated 5 years ago
• Microwave89 / win7-x64-ndk
  Native Development Kit for Vista 64bit And Later, by me, Based on NDK Headers 1.0, by Alex Ionescu
  ☆17Updated 10 years ago