Alternatives and similar repositories for KasR3Hook

Users that are interested in KasR3Hook are comparing it to the libraries listed below

• smallzhong / kernel_monitor

  View on GitHub
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆69Nov 19, 2025Updated 2 months ago
• amateurVV / AmateurVT

  View on GitHub
  ☆27Jan 4, 2024Updated 2 years ago
• smallzhong / KernelHook

  View on GitHub
  一个用来做windows内核hook的框架
  ☆188Apr 29, 2025Updated 9 months ago
• kouzhudong / InjectDll

  View on GitHub
  Inject dll to process in driver
  ☆10Aug 27, 2024Updated last year
• kouzhudong / AntiHook

  View on GitHub
  Enum and Remove Hook in Windows
  ☆50Dec 11, 2025Updated 2 months ago
• fengjixuchui / InitiativeDefense

  View on GitHub
  卓然主动防御源码（可执行文件+完整源码+完整作品报告）
  ☆15Mar 5, 2019Updated 6 years ago
• OMRI-FRX / LMalz

  View on GitHub
  硬件虚拟化
  ☆63Aug 13, 2025Updated 6 months ago
• Oxygen1a1 / DrvMon

  View on GitHub
  a monitoring windows driver calls kernel api tools
  ☆126Jul 5, 2024Updated last year
• DragonQuestHero / Medusa

  View on GitHub
  Radical Windows ARK
  ☆251Apr 18, 2025Updated 9 months ago
• WQARK / WQARK

  View on GitHub
  ☆26Jul 19, 2025Updated 6 months ago
• szdyg / pdb_proxy

  View on GitHub
  ☆47Feb 3, 2025Updated last year
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• 2367765883 / hidedriver-normal

  View on GitHub
  ☆45Sep 25, 2024Updated last year
• fjqisba / QtMetaParser

  View on GitHub
  ida plugin to parse qt meta data
  ☆84Jan 15, 2025Updated last year
• IcEy-999 / PDB-Frame

  View on GitHub
  对debughelp的二次开发
  ☆11Feb 20, 2023Updated 2 years ago
• mizukiyyds / asm_obfuscator

  View on GitHub
  非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路
  ☆33Mar 12, 2023Updated 2 years ago
• Oxygen1a1 / InfinityHook_latest

  View on GitHub
  etw hook (syscall/infinity hook) compatible with the latest Windows version of PG
  ☆320Apr 27, 2024Updated last year
• Kwansy98 / EasyPdb

  View on GitHub
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆157Mar 26, 2024Updated last year
• muxq / hellorpc

  View on GitHub
  windows rpc 使用MIDL+RPC实现HelloWorld
  ☆23Mar 21, 2018Updated 7 years ago
• 0xhido / BlueLight

  View on GitHub
  Open-source EDR kernel-component for system monitoring and DLL injection
  ☆33Nov 14, 2020Updated 5 years ago
• Mrack / tracer-rs

  View on GitHub
  使用 frida stalker 实现的 trace
  ☆29Dec 1, 2022Updated 3 years ago
• fjqisba / VmpHelper

  View on GitHub
  an ida plugin used to decompile vmp
  ☆369Jul 2, 2024Updated last year
• TimelifeCzy / HIPS-HIDS_CveMod

  View on GitHub
  Windows CVE主防(HIPS/HIDS)
  ☆57Apr 29, 2021Updated 4 years ago
• cutecatsandvirtualmachines / SKLib

  View on GitHub
  Standard Kernel Library for Windows manipulation in C++
  ☆199Jun 18, 2025Updated 7 months ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• Oxygen1a1 / oxgenPdb

  View on GitHub
  a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.
  ☆176Sep 13, 2024Updated last year
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆17Oct 4, 2023Updated 2 years ago
• Oxygen1a1 / kcrypt

  View on GitHub
  an encryption library designed for Windows kernel and driver programming
  ☆123Aug 4, 2023Updated 2 years ago
• zhutingxf / InfinityHookPro

  View on GitHub
  InfinityHook 支持Win7 到 Win11 最新版本，虚拟机环境及物理机环境
  ☆103Oct 7, 2024Updated last year
• fIappy / infhook19041

  View on GitHub
  ☆127May 23, 2020Updated 5 years ago
• cs1ime / DICHook

  View on GitHub
  Hook NtDeviceIoControlFile with PatchGuard
  ☆107May 10, 2022Updated 3 years ago
• DearXiaoGui / InfinityHookPro-main

  View on GitHub
  ☆56Nov 21, 2022Updated 3 years ago
• HollyZoe / ExceptionByInstCallback

  View on GitHub
  ☆51Aug 29, 2024Updated last year
• rogxo / ReadPhys

  View on GitHub
  r/w virtual memory without attach
  ☆216Oct 19, 2023Updated 2 years ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• Broihon / Symbol-Parser

  View on GitHub
  Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…
  ☆44Apr 1, 2023Updated 2 years ago
• IcEy-999 / Ntoskrnl_Viewer

  View on GitHub
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆109Sep 1, 2022Updated 3 years ago
• 3499409631 / ReadPhysicalMemory-Without-API

  View on GitHub
  This project can bypass most of the AC except for some perverts that enable VT to monitor page tables
  ☆55May 16, 2024Updated last year
• codetronik / KernelV

  View on GitHub
  Rootkit & Anti-rootkit
  ☆42Jan 27, 2024Updated 2 years ago