Taking advantage of CRT initialization, to get away with hooking protected applications
☆51May 24, 2026Updated 2 months ago
Alternatives and similar repositories for proxy_dll
Users that are interested in proxy_dll are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)☆21Mar 16, 2026Updated 4 months ago
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆51Mar 22, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Aug 11, 2023Updated 2 years ago
- XOrCryptEx lightweight C Utility/Algorithm☆13Mar 3, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Detours is a compact C++ runtime instrumentation library for x86/x86-64 Windows and Linux. The core library is intentionally kept in two …☆52Jul 19, 2026Updated last week
- Advanced driver monitoring utility.☆215Jul 8, 2026Updated 3 weeks ago
- My research WIP bluepill hypervisor☆41Mar 15, 2023Updated 3 years ago
- kernel-mode TDI client which can send and receive HTTP requests☆56Jun 9, 2018Updated 8 years ago
- A flexible and efficient binary pattern matching library designed to help you search and match binary data☆16Oct 29, 2025Updated 8 months ago
- Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）☆130Sep 9, 2022Updated 3 years ago
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking☆54Aug 28, 2022Updated 3 years ago
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆48Mar 3, 2026Updated 4 months ago
- A Windows Direct Syscall Library☆58Apr 23, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A simple process query/manipulation tool using driver hooked system call. (2019)☆11Aug 30, 2021Updated 4 years ago
- High-performance, AI-driven semantic analysis for the IDA Pro decompiler.☆26Nov 18, 2025Updated 8 months ago
- Kernel Detective☆154May 24, 2026Updated 2 months ago
- Simple, fast and lightweight Header-Only C++ Assembler Library☆146Aug 13, 2025Updated 11 months ago
- https://youtube.com/watch?v=LbBV-o2DQaA☆20Jul 19, 2026Updated last week
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆85Dec 21, 2022Updated 3 years ago
- mash hypervisor host pml4☆16Jun 22, 2022Updated 4 years ago
- automates exploits using ROP chains, using ntdll-scraper☆15May 26, 2022Updated 4 years ago
- devirtualization vmprotect☆70Mar 11, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- NOCRT - simple replacement of some parts of C runtime library☆86Jun 28, 2026Updated last month
- Hijack NotifyRoutine for a kernelmode thread☆38Jun 4, 2022Updated 4 years ago
- Cross-platform proxy resolution library written in C.☆17Jul 15, 2026Updated last week
- Artemis - C++ Hell's Gate Syscall Implementation☆34Aug 16, 2023Updated 2 years ago
- A stack and register based virtual machine which can compile and execute arbitrary code in runtime☆45Apr 7, 2026Updated 3 months ago
- A modern, mostly zero-allocation C++23 library for working with low-level Windows within user-space. Iteration over loaded modules via PE…☆258Jul 12, 2026Updated 2 weeks ago
- Different tools for Microsoft Hyper-V researching☆76May 24, 2026Updated 2 months ago
- R3劫持所有异常☆14Jan 4, 2021Updated 5 years ago
- This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM☆31Nov 6, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆30May 18, 2022Updated 4 years ago
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆62Aug 11, 2023Updated 2 years ago
- VEH Redirect & VEH Debugger☆24May 18, 2020Updated 6 years ago
- Just an example of a well-known technique to detect memory tampering via Windows Working Sets.☆18Jan 15, 2022Updated 4 years ago
- Windows x64 PE process memory dumper to disk☆41Aug 28, 2024Updated last year
- ☆27Apr 5, 2026Updated 3 months ago
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆68Aug 11, 2023Updated 2 years ago