Alternatives and similar repositories for VT_demo:

Users that are interested in VT_demo are comparing it to the libraries listed below

• zhuhuibeishadiao / JunkDriveOpenSource
  Some garbage drivers written for getting started
  ☆64Updated 5 years ago
• alexcub89 / BEClient2
  ☆35Updated 4 years ago
• OkazakiNagisa / VTbasedDebuggerWin7
  by others
  ☆38Updated 7 years ago
• ldebug / ObRegisterCallBacksByPass
  Modify process handle permissions
  ☆59Updated 8 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• rbapat / KernelInjector
  Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected
  ☆36Updated 6 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• haidragon / NewInjectDrv
  APC注入DLL内核层
  ☆23Updated 6 years ago
• gmh5225 / FakeEnclave
  A poc that abuses Enclave
  ☆37Updated 2 years ago
• armasm / EasyAntiCheatMemorySig
  eac memory sig maker
  ☆12Updated 3 years ago
• ilovecsad / dwmhook
  ☆17Updated 2 years ago
• NewWorldComingSoon / OAC
  Open Anti Cheat
  ☆27Updated 2 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆32Updated 3 years ago
• luciouskami / RemoveFlagTest
  Another method to anti ThreadHideFromDebugger
  ☆35Updated 6 years ago
• Darkratos / Spoofed-Call
  A wrapper class to hide the original calling address of a function
  ☆57Updated 4 years ago
• KelvinMsft / PerfMon
  first commit
  ☆57Updated 4 years ago
• ExpLife0011 / KeUserModeCallBack
  A Simple Example
  ☆21Updated 6 years ago
• mackiiN / KernelHackBase
  ☆45Updated 4 years ago
• luciouskami / shadowMap
  bypass CRC
  ☆11Updated 6 years ago
• helloobaby / infinityhookEx
  hook system call that on user mode
  ☆13Updated 3 years ago
• samshine / VoyagerWithEPT
  ☆34Updated 2 years ago
• gmh5225 / kcpplib
  The driver STL library used by myself
  ☆12Updated 2 years ago
• MatrixKung / ntoskrnl
  Windows Kernel nt files - To research windows kernel
  ☆15Updated 4 years ago
• tandasat / capstone
  Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, J…
  ☆14Updated 5 years ago
• Broihon / Symbol-Parser
  Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…
  ☆43Updated last year
• bb33bb / r3epthook
  使用vt进行无痕hook，支持r3
  ☆53Updated 6 years ago
• KelvinMsft / UsbMon
  ☆34Updated 4 years ago
• TimelifeCzy / kHypervisorBasic
  VT Hook
  ☆46Updated 8 months ago
• helloobaby / Nmi-Callback
  detect hypervisor with Nmi Callback
  ☆34Updated 2 years ago
• fIappy / InfinityHook
  Hook system calls, context switches, page faults and more.
  ☆34Updated 5 years ago