Alternatives and similar repositories for HDE64:

Users that are interested in HDE64 are comparing it to the libraries listed below

• alal4465 / KernelMon
  A ProcMon-esque tool for monitoring Windows Kernel Drivers
  ☆54Updated 3 years ago
• fIappy / infhook19041
  ☆123Updated 4 years ago
• dennisbabkin / InjectAll
  Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…
  ☆129Updated 3 years ago
• not-wlan / instrumentation-callbacks
  based on https://github.com/secrary/Hooking-via-InstrumentationCallback
  ☆68Updated 5 years ago
• Rythorndoran / PageTableHook
  ☆127Updated 2 years ago
• GoodstudyChina / APC-injection-x86-x64
  ☆65Updated 6 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆65Updated 11 months ago
• huoji120 / MakeInfinityHookGreatAgain
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆128Updated 3 years ago
• NewWorldComingSoon / llvm-msvc
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆82Updated last year
• qq1045551070 / ShotHv
  ShotHv
  ☆132Updated 2 years ago
• MiroKaku / DetoursX
  Kernel-Mode extended version of https://github.com/microsoft/Detours
  ☆152Updated 2 years ago
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆96Updated 3 years ago
• gmh5225 / ntoskrnl_file_collection
  Collect various versions of ntoskrnl files
  ☆49Updated last year
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆101Updated 6 months ago
• adrianyy / x64-syscall
  x64 syscall caller in C++.
  ☆86Updated 6 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆107Updated 2 years ago
• rbmm / INJECT
  D
  ☆40Updated 3 years ago
• mrexodia / driver_unpacking
  Ghetto user mode emulation of Windows kernel drivers.
  ☆133Updated 3 months ago
• ilovecsad / veh_hide_memory
  ☆68Updated 2 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆90Updated last week
• NewWorldComingSoon / llvm-msvc-build
  This project migrated to https://github.com/backengineering/llvm-msvc
  ☆141Updated last year
• DearXiaoGui / InfinityHookPro-main
  ☆53Updated 2 years ago
• MiroKaku / Nt-Modules
  Collect different versions of Crucial modules.
  ☆128Updated 6 months ago
• zer0condition / Demystifying-PatchGuard
  Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…
  ☆114Updated last year
• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆72Updated 3 months ago
• cs1ime / DICHook
  Hook NtDeviceIoControlFile with PatchGuard
  ☆103Updated 2 years ago
• KANKOSHEV / Detect-KeAttachProcess
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆109Updated 2 years ago
• Kwansy98 / EasyPdb
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆127Updated 10 months ago
• UCFoxi / VTableKFunctionHook
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆83Updated 3 years ago
• Ido-Moshe-Github / CiDllDemo
  Use ci.dll API for validating Authenticode signature of files
  ☆137Updated 2 years ago