zouxianyu / PhysicalMemoryRW
the basic version of the ring0 physical memory read/write tool
☆89Updated 5 years ago
Alternatives and similar repositories for PhysicalMemoryRW:
Users that are interested in PhysicalMemoryRW are comparing it to the libraries listed below
- ☆123Updated 4 years ago
- ayy debuger☆88Updated 11 months ago
- Hide codes/data in the kernel address space.☆188Updated 3 years ago
- ☆94Updated 7 years ago
- Some garbage drivers written for getting started☆64Updated 5 years ago
- x64 free protect Features 1.process/thread handle protect 2.anti taskmgr.exe 3.hide process 4.anti-debugger(user/kernel debugger)☆81Updated 5 years ago
- ☆110Updated 5 years ago
- first commit☆57Updated 4 years ago
- 使用vt进行无痕hook,支持r3☆53Updated 6 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆107Updated 2 years ago
- Hook system calls, context switches, page faults and more.☆33Updated 5 years ago
- Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查☆93Updated last year
- ☆68Updated 2 years ago
- A hypervisor hiding user-mode memory using EPT☆106Updated 7 years ago
- ☆126Updated 2 years ago
- Collect different versions of Crucial modules.☆129Updated 7 months ago
- 之前学习X64VT写的代码,很多坑,但是大体的逻辑还是完整的。现发出来给更多想学VT的人参考...☆66Updated 3 years ago
- Windows Driver Kit Extesion Header (Undoc)☆132Updated 3 years ago
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆75Updated 3 years ago
- 让Etwhook再次伟大! Make InfinityHook Great Again!☆128Updated 3 years ago
- Intel Virtualization Technology demo☆65Updated 8 years ago
- ☆80Updated 2 years ago
- ☆163Updated 2 years ago
- Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB☆80Updated last year
- Process path modification x64☆53Updated 6 years ago
- Windows kernel drivers simple HTTP library for modern C++☆42Updated 6 years ago
- 不使用3环挂钩进行DWM桌面绘制☆79Updated 3 years ago
- Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.☆109Updated 3 years ago
- win10 pgContext dynamic dump (btc version)☆104Updated 5 years ago
- An Ark tool project,run on Win7 x86/x64☆113Updated 7 years ago