Alternatives and similar repositories for Anti-Rootkits:

Users that are interested in Anti-Rootkits are comparing it to the libraries listed below

• xiaobfly / AnalyzePdb
  ☆27Updated 5 years ago
• Iamgublin / LockWebPageDriver
  锁主页驱动
  ☆37Updated 5 years ago
• in12hacker / VT_64_EPT
  createfile
  ☆48Updated 9 years ago
• 0xbadc0de1 / VmP_DBG
  This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…
  ☆45Updated 8 years ago
• swatkat / arkitlib
  Windows anti-rootkit library
  ☆38Updated 9 years ago
• reinhardvz / wsk
  Automatically exported from code.google.com/p/wskudp
  ☆43Updated 9 years ago
• pr0code / https-github.com-ExpLife0011-awesome-windows-kernel-security-development
  ☆30Updated 6 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• zhuhuibeishadiao / MiniVTx64
  Intel Virtualization Technology demo
  ☆65Updated 8 years ago
• DeDf / WProtect
  ☆40Updated 5 years ago
• andylau004 / LookDrvCode
  LookDrvCode
  ☆30Updated 10 years ago
• kernweak / Syscall-Monitor
  大表哥的Syscall-Monitor
  ☆34Updated 5 years ago
• dybb8999 / DriverTool
  一个可以帮助你进行Windows驱动开发和分析的工具。
  ☆43Updated 3 years ago
• DeDf / DownloadPDB
  ☆38Updated 5 years ago
• AzureGreen / ArkToolDrv
  An ark tool's driver
  ☆40Updated 7 years ago
• Frenda / libScanHook
  ☆46Updated 7 years ago
• devilogic / xvirus
  一个早期的抗启发式查杀的WIN32免杀壳
  ☆44Updated 11 years ago
• Eva1216 / MagicWall
  ☆45Updated 6 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆75Updated 3 years ago
• qiantangbanmu / WProtectvs
  ☆23Updated 7 years ago
• stonedreamforest / re_avkmgr
  逆向小红伞杀毒软件驱动——avkmgr
  ☆69Updated 7 years ago
• zhuhuibeishadiao / DriverMaper
  map driver to memory
  ☆25Updated 6 years ago
• whitephone / Windows-Rootkits
  ☆26Updated 7 years ago
• DeDf / HookSyscall64
  ☆35Updated 8 years ago
• bronzeMe / SSDT_Hook_x64
  ☆36Updated 7 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 6 years ago
• hrbust86 / SvmNest
  a frame of amd-v svm nest
  ☆53Updated 4 years ago
• Iamgublin / libemu_pe
  enable libemu run pe file and add some good modify
  ☆14Updated 6 years ago
• Kerisa / HIPS-Light
  一个简单的用于win7 x64的驱动级HIPS
  ☆53Updated 8 years ago
• hostzhen / sysark
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Updated 7 years ago