Alternatives and similar repositories for DisPg

Users that are interested in DisPg are comparing it to the libraries listed below

• kernweak / Syscall-Monitor
  大表哥的Syscall-Monitor
  ☆34Updated 6 years ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 8 years ago
• yuvatia / Win10GdiExploitation
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Updated 7 years ago
• Nerlant / SyscallDumper
  ☆19Updated 6 years ago
• Barakat / windows.sandbox
  Windows sandbox PoC
  ☆32Updated 5 years ago
• zhuhuibeishadiao / DriverMaper
  map driver to memory
  ☆26Updated 7 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆44Updated 7 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 6 years ago
• DragonQuestHero / YouDontNeedInstallWDK
  You don't need install any wdk for development kernel driver
  ☆24Updated 7 years ago
• fadetrack / KernelMemoryModule
  ☆14Updated 7 years ago
• Amoystyle / LLVM-VS
  Using Microsoft Visual Studio 2019 Building A LLVM Out-Source-Tree Pass
  ☆16Updated 5 years ago
• zer0mem / VadScanner
  PoC of BOOST-ed _EPROCESS.VadRoot iterating
  ☆26Updated 11 years ago
• 0xcpu / exthost
  A POC for Windows Extension Host hooking
  ☆24Updated 6 years ago
• KelvinMsft / ScreenCapAttack
  ☆33Updated 4 years ago
• AzureGreen / VAToPA
  a demo for x86/x64's paging memory management learning, convert a virtual address from ring3 to physical address in ring0
  ☆19Updated 8 years ago
• killvxk / Researchs
  一些研究
  ☆14Updated 5 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 7 years ago
• binbibi / CallbackEx
  Demo List cm/ps/ob/minifilter callback And Patch/Bypass it
  ☆29Updated 7 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• mq1n / Wow64SyscallHook
  Wow64 syscall hook
  ☆41Updated 8 years ago
• wolk-1024 / CrossInject
  x86/x64 dll injector
  ☆31Updated 3 years ago
• DeDf / WProtect
  ☆41Updated 5 years ago
• fIappy / FpVTProject
  intel vt-x hypervisor ept
  ☆24Updated 5 years ago
• 0xbadc0de1 / VmP_DBG
  This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…
  ☆47Updated 8 years ago
• gigabitwize / dank
  Driver Loader/BE Bypass/Win Malware(lol)
  ☆35Updated 6 years ago
• zhuhuibeishadiao / UserMemoryOperation64
  Map memory to user space and manipulate user memory, using capmon
  ☆24Updated 6 years ago
• aphage / wow64-gate-hook
  Wow64 Heaven's Gate Hook
  ☆28Updated 4 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 4 years ago
• peta909 / NtCreateUserProcess_
  ☆12Updated 6 years ago