Ross ROSS = Recommend OSS · open-source software intelligence for agents

ClownQq/YDArk

X64内核小工具 observed · 2026-08-28

github.com/ClownQq/YDArk observed · 2026-08-28

Health v2 · maintenance only

32/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2521
  • days_rel: n/a
  • days_push: 958
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1375 stars · 229 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

YDArk is a free x64 Windows kernel inspection tool similar to PCHunter, providing GUI views of processes, threads, handles, drivers, kernel hooks (SSDT, IDT, filters), and network state. It is aimed at learning and system research, with an unsigned VMProtect-packed driver that requires test signing or debug mode.

Use cases

  • inspect and kill hidden processes and threads on windows x64
  • detect and restore ssdt and kernel hooks
  • view and unload kernel drivers including hidden ones
  • dump process memory and modules
  • enumerate system notify callbacks and dpc timers
  • analyze filter drivers and file system hooks
  • view open handles and network ports

When to choose

  • you need a PCHunter-style kernel inspector for 64-bit windows
  • you are researching rootkits, hooks, or kernel callbacks
  • you want to dump drivers or restore patched kernel tables

When to avoid

  • you need a signed production tool or kernel isolation (HVCI) compatibility
  • you cannot disable Secure Boot or enable test signing
  • you need a license for commercial use

Facets

application · maturity active

security reverse-engineering developer-tools gui security reverse-engineering windows developer-tools windows kernel-tools rootkit-detection system-internals x64 pchunter-alternative driver-inspection desktop

1 source

Member repositories

RepositoryRoleHealth v2
ClownQq/YDArkmain32

For agents

markdown · JSON · MCP: product_card(name="ClownQq/YDArk")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem