zhuhuibeishadiao / ntoskrnl

Related projects: ⓘ

• adrianyy / kernelhook
  Windows inline hooking tool.
  ☆207Updated 5 years ago
• gmh5225 / CallMeWin32kDriver
  Load your driver like win32k.sys
  ☆242Updated 2 years ago
• MiroKaku / libwsk
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆226Updated 5 months ago
• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆355Updated this week
• m417z / ntdoc
  Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
  ☆142Updated this week
• anzelesnik / SyscallHook
  System call hook for Windows 10 20H1
  ☆461Updated 3 years ago
• armasm / EasyAntiPatchGuard
  Easy Anti PatchGuard
  ☆212Updated 3 years ago
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆214Updated 2 years ago
• adrianyy / KeInject
  Kernel LdrLoadDll injector
  ☆258Updated 5 years ago
• jonomango / nohv
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆167Updated last year
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆355Updated 3 years ago
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆283Updated 9 months ago
• amiryeshurun / HyperWin
  A native hypervisor designed for the Windows operating system
  ☆120Updated 3 years ago
• kkent030315 / NoPatchGuardCallback
  x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code
  ☆195Updated 3 years ago
• 0mWindyBug / KDP-compatible-driver-loader
  KDP compatible unsigned driver loader leveraging a write primitive in one of the IOCTLs of gdrv.sys
  ☆117Updated 3 months ago
• AdamOron / PatchGuardBypass
  Bypassing PatchGuard on modern x64 systems
  ☆238Updated last year
• utoni / PastDSE
  DSE bypass using a leaked cert and adjusting the current clock.
  ☆133Updated 2 years ago
• emlinhax / dse_hook
  load unsigned kernel-driver by patching dse in 248 lines
  ☆96Updated 5 months ago
• d35ha / xObf
  Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine
  ☆238Updated last year
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆283Updated 3 weeks ago
• jonomango / hv
  Lightweight Intel VT-x Hypervisor.
  ☆377Updated last year
• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆193Updated 4 years ago
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆251Updated 2 years ago
• MellowNight / AetherVisor
  Memory hacking library powered by AMD SVM
  ☆290Updated last year
• Deputation / instrumentation_callbacks
  A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.
  ☆111Updated 2 years ago
• zer0condition / ZeroThreadKernel
  Recursive and arbitrary code execution at kernel-level without a system thread creation
  ☆150Updated last year
• Air14 / airhv
  Simple Intel VT-x hypervisor
  ☆247Updated 9 months ago
• 1401199262 / Hook-KdTrap
  ☆180Updated last year
• VollRagm / PTView
  Browse Page Tables on Windows (Page Table Viewer)
  ☆178Updated 2 years ago
• NewWorldComingSoon / llvm-msvc-build
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆140Updated last year