Alternatives and similar repositories for HypercallPageHook

Users that are interested in HypercallPageHook are comparing it to the libraries listed below

• gmh5225 / Hook-HvlSwitchVirtualAddressSpace

  View on GitHub
  Not mine. Only for saving
  ☆26Jun 28, 2022Updated 3 years ago
• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• zer0condition / Demystifying-PatchGuard

  View on GitHub
  Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…
  ☆133Apr 26, 2023Updated 2 years ago
• EBalloon / Rw-No-Attach

  View on GitHub
  ☆159May 21, 2024Updated last year
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• ekknod / Nmi

  View on GitHub
  Old way for blocking NMI interrupts
  ☆29Sep 6, 2022Updated 3 years ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• zer0condition / ZeroThreadKernel

  View on GitHub
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆159Apr 13, 2023Updated 2 years ago
• ZEROWyt / Patchguard-2023

  View on GitHub
  ☆23Jul 24, 2023Updated 2 years ago
• POPFD / HypervisorBase

  View on GitHub
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Mar 11, 2021Updated 4 years ago
• ekknod / acdrv

  View on GitHub
  base for testing
  ☆186Sep 28, 2024Updated last year
• ekknod / efi-monitor

  View on GitHub
  just proof of concept. hooking MmCopyMemory PG safe.
  ☆81Nov 13, 2023Updated 2 years ago
• kkent030315 / kdump

  View on GitHub
  A kernel module dumper for Windows x64 using mhyprot vulnerable driver
  ☆37Oct 26, 2020Updated 5 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• zer0condition / Reversing-a-signed-driver

  View on GitHub
  Reverse Engineering a signed kernel driver packed and virtualized with VMProtect 3.6
  ☆105Apr 28, 2023Updated 2 years ago
• nanabingies / x64-Page-Walker

  View on GitHub
  Walks through the 4-level paging structures in Windows x64
  ☆13Feb 12, 2023Updated 3 years ago
• kkent030315 / kernel_callbacks

  View on GitHub
  Bypasses for Windows kernel callbacks PatchGuard protection
  ☆44Aug 15, 2021Updated 4 years ago
• zanpocc / VTFrame

  View on GitHub
  基于Intel-VT技术的windows内核增强型驱动
  ☆30Jun 9, 2022Updated 3 years ago
• boom-cr3 / NotifyRoutineHijackThread

  View on GitHub
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Jun 4, 2022Updated 3 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆206Aug 18, 2023Updated 2 years ago
• addrianyy / asmlib_x64

  View on GitHub
  x64 assembler library
  ☆31Jun 7, 2024Updated last year
• orca-eaa5a / mploader

  View on GitHub
  Portable & Custmizable Windows Defender
  ☆13Nov 10, 2021Updated 4 years ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• estimated1337 / hidden_syscall

  View on GitHub
  hidden_syscall - syscaller without using syscall instruction in code
  ☆62Jan 23, 2023Updated 3 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆52Feb 7, 2022Updated 4 years ago
• waryas / KACE

  View on GitHub
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆365Aug 18, 2022Updated 3 years ago
• 1401199262 / InstrumentationCallback

  View on GitHub
  ☆29Dec 29, 2022Updated 3 years ago
• btbd / wpp

  View on GitHub
  Intercepting DeviceControl via WPP
  ☆138Nov 18, 2019Updated 6 years ago
• stonedreamforest / Tstl

  View on GitHub
  The kernel mode Standard Template Library Template
  ☆19Feb 22, 2020Updated 5 years ago
• stdhu / windows-kernel-pagehook

  View on GitHub
  windows kernel pagehook
  ☆41Oct 30, 2022Updated 3 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• momo5502 / ept-hook-detection

  View on GitHub
  🪝 Various EPT hook detection approaches
  ☆143Jul 29, 2025Updated 6 months ago
• KANKOSHEV / Detect-KeAttachProcess

  View on GitHub
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆119Feb 8, 2022Updated 4 years ago
• ekknod / MouseClassServiceCallbackTrick

  View on GitHub
  ☆63Sep 28, 2022Updated 3 years ago
• IcEy-999 / Kernel-Special-APC-ReadProcessMemory

  View on GitHub
  Example of reading process memory through kernel special APC
  ☆110Apr 21, 2023Updated 2 years ago
• iqrw0 / DieDMAProtection

  View on GitHub
  ☆29Mar 9, 2024Updated last year