.NET library for hooking and dumping Clr
☆44Jun 11, 2024Updated 2 years ago
Alternatives and similar repositories for ClrAnalyzer
Users that are interested in ClrAnalyzer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple JIT compiler hook in C#☆92May 13, 2014Updated 12 years ago
- POC about how to prevent windbg break☆15Oct 3, 2022Updated 3 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆14Aug 11, 2023Updated 2 years ago
- A managed .NET Jit hooking library.☆15Dec 3, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- load mixed assemblies (.NET) C# source code☆14Sep 3, 2017Updated 8 years ago
- Example JIT Hook for .NET FW/Core.☆54Feb 21, 2020Updated 6 years ago
- ☆33Jul 6, 2020Updated 5 years ago
- A dnlib port of ILProtectorUnpacker. Contains slight modifications and improvements.☆11Dec 27, 2020Updated 5 years ago
- Modded version of KoiVM☆13Aug 17, 2019Updated 6 years ago
- Prototype of writing a managed JIT in C# with CoreCLR☆77Mar 17, 2024Updated 2 years ago
- Locate the address of .NET metadata by CLR to anti anti dump☆72Feb 18, 2022Updated 4 years ago
- String decryption for Agile.NET packed assemblies.☆37Oct 3, 2021Updated 4 years ago
- Pure Go bindings for Zydis.☆15May 22, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Sample use cases of the .NET native code hooking technique☆222Feb 9, 2018Updated 8 years ago
- Lightweight and flexible .NET packer☆21Apr 25, 2018Updated 8 years ago
- A dnSpy extension to hot-reload themes☆12Dec 27, 2020Updated 5 years ago
- Inject a .NET assembly into a native process using the CLR Hosting API☆21Apr 28, 2018Updated 8 years ago
- A copy of my Mathematics and Computer Engineering B.Sc. thesis☆20Dec 8, 2020Updated 5 years ago
- ☆18Nov 11, 2017Updated 8 years ago
- JITM is an automated tool to bypass the JIT Hooking protection on a .NET sample.☆57Dec 11, 2020Updated 5 years ago
- TrinitySeal patcher.☆10Nov 26, 2019Updated 6 years ago
- Opens the file from the attached process to be able to debug (might be usefull)☆13Jul 8, 2019Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- x64 Kernel Hooks Detection☆21Jan 1, 2017Updated 9 years ago
- ☆27Dec 29, 2021Updated 4 years ago
- A simple process query/manipulation tool using driver hooked system call. (2019)☆11Aug 30, 2021Updated 4 years ago
- devirtualizer for memevm☆18May 26, 2020Updated 6 years ago
- 参考taviso的代码逆向一下mpengine.dll☆20Jun 30, 2022Updated 3 years ago
- RenameLocalVars is an IDA plugin that renames local variables to something easier to read.☆15Jul 9, 2023Updated 2 years ago
- Simple mod which provides a few blocks which can convert energy from and to EU or RF☆13Feb 9, 2021Updated 5 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Yet another CawkVM unpacker...☆79Feb 24, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Devirtualizer for Eazfuscator.NET☆30Aug 8, 2017Updated 8 years ago
- ☆82Feb 12, 2022Updated 4 years ago
- de4dot fixed to handle "anti-de4dot" interface adder☆34Jun 6, 2020Updated 6 years ago
- AMSI detection PoC☆31Apr 14, 2020Updated 6 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Dec 31, 2020Updated 5 years ago