Lightweight Patchless Hooking Library for Windows
☆19Dec 31, 2025Updated 9 months ago
Alternatives and similar repositories for XATHook
Users that are interested in XATHook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.☆35Jun 23, 2024Updated 2 years ago
- ☆33Oct 19, 2024Updated 2 years ago
- A runtime Assembly dumper for powershell to combat the rise in .net based crypters and malware.☆17Aug 26, 2025Updated last year
- ☆11May 5, 2024Updated 2 years ago
- HardwareTurningPoint, Fully Go Compatible Hardware Breakpoint☆16Jan 30, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- WinDumper is a Windows utility for resolving unexported ntdll.dll functions using portable AOB signatures.☆14Dec 30, 2025Updated 9 months ago
- Utilizing DLang For Offensive Operations.☆15May 29, 2025Updated last year
- 🐱💻 Disables the Driver Signature Enforcement using g_CiOptions patch☆14Nov 6, 2024Updated last year
- A simple Reset Survival PoC☆14Jan 25, 2026Updated 9 months ago
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated last year
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆140Aug 31, 2025Updated last year
- REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""☆14Mar 31, 2025Updated last year
- Exodus and Atomic crypto wallets app.asar injection POC (captures mnemonic and password) for educational purposes only.☆28Jul 3, 2024Updated 2 years ago
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A unique introduction to native runtime obfuscation.☆76Mar 2, 2025Updated last year
- Spoof the return address of any function call.☆11Jul 21, 2024Updated 2 years ago
- A Free Open sourced crypter that builds a output .NET .exe Stub (Updated whenever I feel like it)☆23Oct 18, 2025Updated last year
- Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence a…☆21Jul 6, 2024Updated 2 years ago
- llvm powered deobfuscation of a vm-based protection☆65Feb 25, 2026Updated 8 months ago
- Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET☆52May 5, 2025Updated last year
- semi-auto static deobfuscator for functions which is obfuscated by lazy importer.☆17Nov 27, 2024Updated last year
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 6 months ago
- ☆12Feb 26, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Free rolimons trade ad bot. This is smarter and WAY better than any other bot.☆18Apr 13, 2025Updated last year
- Reverse engineering malware samples☆16Dec 3, 2021Updated 4 years ago
- A ConfuserEx2 deobfuscator with support for anti tamper, compressor, constants, control flow, and resource recovery.☆45Jul 29, 2026Updated 3 months ago
- Proof of concept demonstrating a method of proxying syscalls indirectly☆10Jul 3, 2024Updated 2 years ago
- Undocumented MSVC☆49Nov 10, 2025Updated 11 months ago
- Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+☆38Dec 1, 2025Updated 10 months ago
- Uploads & updates models in bulk☆12Jan 27, 2026Updated 9 months ago
- A C++/Asm template for PIC/EXE/DLL malware☆24Aug 12, 2025Updated last year
- Various novel EPT/NPT hook detection mechanisms.☆27Mar 20, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- Shellcode encoder&loader written in Go language, which can encrypt binary or PE files. It offers a variety of complex encryption algorith…☆20May 24, 2024Updated 2 years ago
- A slightly more fun way to disable windows defender☆52May 4, 2025Updated last year
- A 64 bit executable junk code engine for polymorphic malware.☆80Jun 16, 2025Updated last year
- proper ntdll .text section unhooking via native api. unlike other unhookers this doesnt leave 2 ntdlls loaded. x86/x64/wow64 supported.☆56Dec 9, 2025Updated 10 months ago
- Another version of .NET loader provides capabilities of bypassing ETW and AMSI, utilizing VEH for syscalls and loading .NET assemblies☆49Jul 6, 2025Updated last year
- A helper class for hardware breakpoints☆12Apr 25, 2020Updated 6 years ago