Alternatives and similar repositories for wow64pp

Users that are interested in wow64pp are comparing it to the libraries listed below

• JustasMasiulis / nt_wrapper

  View on GitHub
  A wrapper library around native windows sytem APIs
  ☆447Feb 2, 2021Updated 5 years ago
• JustasMasiulis / inline_syscall

  View on GitHub
  Inline syscalls made easy for windows on clang
  ☆736Jun 21, 2024Updated last year
• rwfpl / rewolf-wow64ext

  View on GitHub
  Helper library for x86 programs that runs under WOW64 layer on x64 versions of Microsoft Windows operating systems.
  ☆1,000Jan 17, 2023Updated 3 years ago
• JustasMasiulis / memory_signature

  View on GitHub
  A small wrapper class providing an unified interface to search for various memory signatures
  ☆79Feb 2, 2022Updated 4 years ago
• JustasMasiulis / vmutils

  View on GitHub
  cross platform library to manipulate and extract information of memory regions
  ☆34Apr 10, 2018Updated 7 years ago
• dadas190 / Heavens-Gate-2.0

  View on GitHub
  Executes 64bit code from a 32bit process
  ☆241Jul 23, 2017Updated 8 years ago
• JustasMasiulis / remote_memory

  View on GitHub
  A simple library which provides a way to read and write the memory of other processes
  ☆56May 7, 2018Updated 7 years ago
• bb107 / RtlWow64

  View on GitHub
  c++ implementation of windows heavens gate
  ☆70Feb 12, 2021Updated 5 years ago
• DownWithUp / CallMon

  View on GitHub
  CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers
  ☆145Sep 5, 2020Updated 5 years ago
• secrary / Hooking-via-InstrumentationCallback

  View on GitHub
  codes for my blog post: https://secrary.com/Random/InstrumentationCallback/
  ☆183Nov 30, 2017Updated 8 years ago
• johnsonjason / RVDbg

  View on GitHub
  RVDbg is a debugger/exception handler for Windows processes and has the capability to circumvent anti-debugging techniques. (Cleaner, doc…
  ☆72Sep 5, 2020Updated 5 years ago
• 0xcpu / WinAltSyscallHandler

  View on GitHub
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆239Nov 6, 2019Updated 6 years ago
• JustasMasiulis / lazy_importer

  View on GitHub
  library for importing functions from dlls in a hidden, reverse engineer unfriendly way
  ☆1,892Aug 3, 2023Updated 2 years ago
• ajkhoury / Dude-Loader

  View on GitHub
  Class implementation of PowerLoader injection technique
  ☆32Dec 23, 2016Updated 9 years ago
• Synestraa / Highcall-Library

  View on GitHub
  usermode standalone kernel interface
  ☆111Jul 9, 2018Updated 7 years ago
• vmcall / nt-mapper

  View on GitHub
  C++17 PE manualmapper
  ☆431Oct 2, 2021Updated 4 years ago
• vmcall / owned_alignment

  View on GitHub
  Hooking kernel functions by abusing alignment
  ☆248Jan 5, 2021Updated 5 years ago
• JustasMasiulis / process_handle

  View on GitHub
  A cross platform, leak free system handle wrapper
  ☆19Oct 24, 2017Updated 8 years ago
• hasherezade / libpeconv

  View on GitHub
  A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
  ☆1,323Oct 31, 2025Updated 3 months ago
• can1357 / ByePg

  View on GitHub
  Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
  ☆901Nov 21, 2019Updated 6 years ago
• mike1k / perses

  View on GitHub
  X86 Mutation Engine with Portable Executable compatibility.
  ☆532May 24, 2022Updated 3 years ago
• mike1k / HookHunter

  View on GitHub
  Analyze patches in a process
  ☆259Jul 28, 2021Updated 4 years ago
• JustasMasiulis / xorstr

  View on GitHub
  heavily vectorized c++17 compile time string encryption.
  ☆1,404Nov 19, 2021Updated 4 years ago
• can1357 / linux-pe

  View on GitHub
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆338Apr 24, 2025Updated 9 months ago
• yardenshafir / SymlinkCallback

  View on GitHub
  A driver that hooks C: volume using symbolic link callback to track all FS access to the volume
  ☆110Apr 24, 2020Updated 5 years ago
• vmcall / latebros

  View on GitHub
  x64 usermode rootkit
  ☆211Apr 11, 2018Updated 7 years ago
• DarthTon / Polychaos

  View on GitHub
  PE permutation library
  ☆277Apr 8, 2023Updated 2 years ago
• sondernextdoor / Poseidon

  View on GitHub
  Stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device o…
  ☆376Mar 15, 2024Updated last year
• can1357 / physical_mem_controller

  View on GitHub
  A library to read physical memory and system-wide virtual memory.
  ☆128May 3, 2018Updated 7 years ago
• 3gstudent / Inject-dll-by-Process-Doppelganging

  View on GitHub
  Process Doppelgänging
  ☆162Dec 19, 2017Updated 8 years ago
• changeofpace / Self-Remapping-Code

  View on GitHub
  This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemo…
  ☆631Mar 19, 2019Updated 6 years ago
• wbenny / pdbex

  View on GitHub
  pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
  ☆890Jun 18, 2025Updated 7 months ago
• wbenny / DetoursNT

  View on GitHub
  Detours with just single dependency - NTDLL
  ☆671Nov 25, 2025Updated 2 months ago
• Fyyre / ntdll

  View on GitHub
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆149Jun 16, 2019Updated 6 years ago
• wolk-1024 / WoW64Utils

  View on GitHub
  WoW64 -> x64
  ☆18Oct 1, 2016Updated 9 years ago
• Frenda / libScanHook

  View on GitHub
  ☆48Jun 19, 2017Updated 8 years ago
• HoShiMin / Avanguard

  View on GitHub
  The Win32 Anti-Intrusion Library
  ☆213May 30, 2019Updated 6 years ago
• d35ha / CallObfuscator

  View on GitHub
  Obfuscate specific windows apis with different apis
  ☆1,021Feb 21, 2021Updated 4 years ago
• zhuhuibeishadiao / PatchGuardResearch

  View on GitHub
  win10 pgContext dynamic dump (btc version)
  ☆110Jan 15, 2020Updated 6 years ago