Alternatives and similar repositories for KasR3Hook

Users that are interested in KasR3Hook are comparing it to the libraries listed below

• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆67Updated last year
• ResetMineMind / tinyKernelHook
  一个仅使用2字节修改实现内核任意函数hook的方法。
  ☆45Updated 2 weeks ago
• mizukiyyds / asm_obfuscator
  非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路
  ☆31Updated 2 years ago
• za233 / NeacController
  Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution
  ☆9Updated 2 months ago
• wbaby / xx_tvm
  ☆33Updated 2 years ago
• smallzhong / kernel_monitor
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆48Updated 3 weeks ago
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆98Updated last month
• ddddhm1234 / TTDEngine
  ☆29Updated last year
• DNLINYJ / DetectVMP3
  A POC to detect the exist of VMProtect 3 protection by search feature watermark.
  ☆79Updated last year
• xia0ji233 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆29Updated 5 months ago
• maskelihileci / IDA_Ollvm-unflattener
  Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.
  ☆34Updated last month
• DearXiaoGui / InfinityHookPro-main
  ☆52Updated 2 years ago
• Jhinxs / ntoskrnl
  收集常用windows版本内核文件
  ☆32Updated last year
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆150Updated last month
• zzhouhe / VM_Analyze
  ☆81Updated 4 years ago
• amateurVV / AmateurVT
  ☆27Updated last year
• PShocker / x86_de_confuse
  x86指令去混淆脚本,基于ida,capstone
  ☆16Updated 3 years ago
• mrexodia / VMProtectTest
  VMProtectTest
  ☆35Updated 2 years ago
• DejavuSecure / DetectNtoskrnlIntegrity
  Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe
  ☆11Updated 2 months ago
• WINGS2709 / 360Safe
  大数字驱动逆向代码
  ☆71Updated last year
• kouzhudong / AntiHook
  Enum and Remove Hook in Windows
  ☆39Updated this week
• rogxo / search
  A series of methods used to detect kernel shellcode for tencent game safe race 2024
  ☆38Updated last year
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆74Updated last year
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆41Updated 2 years ago
• lstaroth / AntiXorstr
  IDA Pro plugin AntiXorstr
  ☆134Updated 3 months ago
• kanren3 / libalpc
  ☆17Updated 7 months ago
• zzzcccyyyggg / Kotoamatsukami
  Kotoamatsukami is an obfuscator based on LLVM-17, utilizing LLVM's new pass to implement plug-in features, for obfuscating multiple langu…
  ☆43Updated 2 months ago
• hypn4 / FuckTP
  ☆21Updated 5 years ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆39Updated 2 years ago
• A-Normal-User / Pretend_HideVirtualMemory
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆83Updated 2 years ago