Alternatives and similar repositories for CustomShim:

Users that are interested in CustomShim are comparing it to the libraries listed below

• zodiacon / TaskSched
  ☆28Updated 2 years ago
• m417z / minhook-detours
  A hooking library with a MinHook-like API and a Detours-like implementation, with support for the x86, x64, and ARM64 platforms
  ☆19Updated last week
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 6 years ago
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆31Updated 11 months ago
• zodiacon / InfStudio
  INF Studio for easier working with driver installation files
  ☆37Updated last year
• mobdk / CloneProcess
  Clone running process with ZwCreateProcess
  ☆57Updated 4 years ago
• Harvester57 / CodeIntegrity-DriverBlocklist
  ☆20Updated this week
• zodiacon / BITSManager
  BITS Transfers Manager
  ☆41Updated last month
• 3dnow / NtCreateLowBoxToken
  A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering
  ☆35Updated 3 months ago
• VergiliusProject / kernels-data
  Windows kernel PDB data parsed into YAML
  ☆36Updated 5 months ago
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• zodiacon / DeviceExplorer
  ☆46Updated 5 months ago
• 0xMegaByte / COM-Explained
  ☆25Updated 2 years ago
• dennisbabkin / SigRemover
  Utility to remove digital code signature from binary PE files in Windows.
  ☆16Updated 4 years ago
• jborean93 / PSDetour-Hooks
  Auditing Hooks for https://github.com/jborean93/PSDetour
  ☆12Updated this week
• hasherezade / libpeconv_and_detours_tpl
  A template for projects using both libPeConv and MS Detours
  ☆15Updated last year
• Mattiwatti / WinMain-is-usually-a-function
  Windows NT port of 'Main is usually a function. So then when is it not?'
  ☆25Updated last year
• therealdreg / Win.Cerdalux
  WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs
  ☆18Updated last year
• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆46Updated 11 months ago
• zodiacon / NativeApps
  Demos and presentation from SECArmy Village Grayhat 2020
  ☆38Updated 2 years ago
• dr-anoroc / rawccopy
  Command line utility for copying files on NTFS using low level disk access
  ☆34Updated last year
• lilkui / runasti
  Runs programs as TrustedInstaller
  ☆49Updated 5 years ago
• m417z / x64dbg-xfg-marker
  An x64dbg plugin which marks XFG call signatures as data
  ☆73Updated last year
• batteryshark / stfu_wow64
  A Generic WOW64 Process Blocker
  ☆14Updated 3 years ago
• WildByDesign / win32-appcontainer-tools
  AppContainer tools for launching sandboxed win32 apps, changing ACL permissions and learning from ETW traces.
  ☆20Updated this week
• rbmm / SearchEx
  D00
  ☆6Updated 3 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated last year
• zodiacon / WinEventHooks
  SetWinEventHook Sample
  ☆47Updated last year
• am0nsec / vxlib
  C Header Only Library for Virii
  ☆10Updated 4 years ago