Alternatives and similar repositories for ApiMonitor

Users that are interested in ApiMonitor are comparing it to the libraries listed below

• MiroKaku / Musa.Core
  Use ntdll/ntoskrnl to implement Kernel32, Advapi32 and other APIs. It includes user-mode and kernel-mode.
  ☆82Updated last week
• DearXiaoGui / InfinityHookPro-main
  ☆52Updated 2 years ago
• A-Normal-User / NtSocket_NtClient_NtServer
  Using NtCreateFile and NtDeviceIoControlFile to realize the function of winsock（利用NtCreateFile和NtDeviceIoControlFile 实现winsock的功能）
  ☆111Updated 2 years ago
• llkbkh / Anti-Rootkit
  ☆48Updated 2 years ago
• send010 / SymbolTypeViewer_HanHua
  SymbolTypeViewer_汉化
  ☆17Updated 4 years ago
• amateurVV / AmateurVT
  ☆27Updated last year
• szdyg / pdb_proxy
  ☆42Updated 3 months ago
• kanren3 / minhook-native
  Based on minhook
  ☆30Updated last year
• KomiMoe / arkCrypter
  Compile-time + Lifetime, Usermode + Kernelmode, safe and lightweight string crypter library for C++17+, based on skCrypter
  ☆11Updated 7 months ago
• sonyps5201314 / wow64ext
  Another wow64ext to try to be compatible with WOW64 for all architectures.
  ☆94Updated 4 months ago
• wanttobeno / KProtect
  Driver protect 驱动保护
  ☆45Updated 5 years ago
• smallzhong / kernel_monitor
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆48Updated 3 weeks ago
• BeneficialCode / InstDrv
  InstDrv v2
  ☆36Updated 10 months ago
• zhuhuibeishadiao / WskHttp
  Windows kernel drivers simple HTTP library for modern C++
  ☆42Updated 6 years ago
• DragonQuestHero / WindowsKernelPrivateSymbolsDump
  Win7内核私有符号结构转储
  ☆67Updated 3 years ago
• DragonQuestHero / DwmDraw
  不使用3环挂钩进行DWM桌面绘制
  ☆80Updated 3 years ago
• MiroKaku / Musa.Runtime
  The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.
  ☆95Updated last week
• Chordp / ClangTest
  ☆28Updated 2 years ago
• grace2017 / SecondProcess
  过TP驱动
  ☆29Updated 5 years ago
• wanttobeno / KillPCHunter_NtTerminateProcess
  模拟NtTerminateProcess的实现关闭PCHunter
  ☆14Updated 7 years ago
• IcEy-999 / Ntoskrnl_Viewer
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆108Updated 2 years ago
• dybb8999 / DriverTool
  一个可以帮助你进行Windows驱动开发和分析的工具。
  ☆44Updated 3 years ago
• NoHeart2019 / KasR3Hook
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆61Updated 3 months ago
• lracker / MyArk
  模仿PCHUNTER的ARK工具
  ☆37Updated 5 years ago
• huoji120 / goodeye
  https://githacks.org/Shawick/goodeye.git
  ☆50Updated 4 years ago
• windpiaoxue / sc4cpp
  sc4cpp is a shellcode framework based on C++
  ☆90Updated 3 years ago
• Binklac / BACWindows
  An anti-cheat project that includes kernel mode.
  ☆41Updated 3 years ago
• skrandy / ProtectYourProcess
  保护进程
  ☆22Updated 2 years ago
• ilovecsad / Ark
  ☆80Updated 3 years ago
• sonyps5201314 / ntdll
  a ntdll.h head file which download from network, and fix all found problems by me.
  ☆32Updated 5 months ago