Intel Virtualization Technology demo
☆72Oct 15, 2016Updated 9 years ago
Alternatives and similar repositories for MiniVTx64
Users that are interested in MiniVTx64 are comparing it to the libraries listed below
Sorting:
- createfile☆50Oct 27, 2015Updated 10 years ago
- Page fault hook use ept (Intel Virtualization Technology)☆200Oct 19, 2016Updated 9 years ago
- ☆28Nov 20, 2017Updated 8 years ago
- x64 Kernel Hooks Detection☆24Jan 1, 2017Updated 9 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆23Sep 18, 2017Updated 8 years ago
- just an lite AntiRootkit for interesting☆24Dec 9, 2015Updated 10 years ago
- A library to install/uninstall NDIS driver on Windows☆15Jul 15, 2015Updated 10 years ago
- Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets☆36Jul 21, 2014Updated 11 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Mar 13, 2017Updated 8 years ago
- by others☆40Jan 28, 2018Updated 8 years ago
- Demo List cm/ps/ob/minifilter callback And Patch/Bypass it☆29Dec 5, 2017Updated 8 years ago
- the basic version of the ring0 physical memory read/write tool☆92Aug 18, 2019Updated 6 years ago
- ☆39Jul 11, 2016Updated 9 years ago
- pseudo-code to show how to disable patchguard with win10☆294Jan 13, 2018Updated 8 years ago
- win10 pgContext dynamic dump (btc version)☆110Jan 15, 2020Updated 6 years ago
- A minifilter driver preserves all modified and deleted files.☆79Jul 17, 2015Updated 10 years ago
- Using C++ STL on Windows kernle development☆91Feb 21, 2019Updated 7 years ago
- An Ark tool project，run on Win7 x86/x64☆118Jul 11, 2017Updated 8 years ago
- Hide codes/data in the kernel address space.☆188May 8, 2021Updated 4 years ago
- An minifilter-based transparent encryptor on Windows.☆30Feb 27, 2017Updated 9 years ago
- 反外挂☆86Oct 23, 2019Updated 6 years ago
- Hide Driver By MiProcessLoaderEntry☆293May 17, 2019Updated 6 years ago
- kHypervisor is a lightweight bluepill-like nested VMM for Windows, it provides and emulating a basic function of Intel VT-x☆444Nov 29, 2021Updated 4 years ago
- MemoryRanger protects kernel data and code by running drivers and hosting data in isolated kernel enclaves using VT-x and EPT features. M…☆232Jul 26, 2020Updated 5 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆78Aug 12, 2015Updated 10 years ago
- A hypervisor hiding user-mode memory using EPT☆107Jan 28, 2018Updated 8 years ago
- x64 free protect Features 1.process/thread handle protect 2.anti taskmgr.exe 3.hide process 4.anti-debugger(user/kernel debugger)☆87Apr 3, 2019Updated 6 years ago
- Some garbage drivers written for getting started☆65Dec 31, 2019Updated 6 years ago
- pass game protect☆12Apr 26, 2014Updated 11 years ago
- MBR manipulation tool☆18Jan 13, 2014Updated 12 years ago
- This project demonstares an illegal read- and write- access to the kernel-mode data for both allocated by 3rd party drivers and EPROCESS …☆13Mar 6, 2018Updated 8 years ago
- Kernel Shellcode to add all privileges in token☆15Mar 13, 2017Updated 8 years ago
- a debugger use vt technology☆355Jun 30, 2022Updated 3 years ago
- Hook IDT vector 0xb2 to detect SCI in 64bit windows.☆34Aug 27, 2022Updated 3 years ago
- map driver to memory☆26Aug 26, 2018Updated 7 years ago
- 使用vt进行无痕hook，支持r3☆61Feb 1, 2019Updated 7 years ago
- LDE64 (relocatable) source code☆103Jun 24, 2015Updated 10 years ago
- Windows Ark 工具的工程和一些demo☆193Mar 6, 2016Updated 10 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆26Jan 1, 2017Updated 9 years ago