使用 Intel 虚拟化特性实现应用层HOOK
☆66Sep 11, 2025Updated 11 months ago
Alternatives and similar repositories for KasR3Hook
Users that are interested in KasR3Hook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆77Nov 19, 2025Updated 8 months ago
- ☆27Jan 4, 2024Updated 2 years ago
- 一个用来做windows内核hook的框架☆187Apr 29, 2025Updated last year
- Enum and Remove Hook in Windows☆54Mar 28, 2026Updated 4 months ago
- ☆26Jul 19, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路☆35Mar 12, 2023Updated 3 years ago
- ☆48Sep 25, 2024Updated last year
- 从MmPfnData中枚举进程和页目录基址☆225Aug 18, 2023Updated 3 years ago
- a monitoring windows driver calls kernel api tools☆137Jul 5, 2024Updated 2 years ago
- Radical Windows ARK☆255Apr 18, 2025Updated last year
- ida plugin to parse qt meta data☆88Jan 15, 2025Updated last year
- 卓然主动防御源码（可执行文件+完整源码+完整作品报告）☆15Mar 5, 2019Updated 7 years ago
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.☆162Mar 26, 2024Updated 2 years ago
- 使用 frida stalker 实现的 trace☆29Dec 1, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Standard Kernel Library for Windows manipulation in C++☆216Jun 18, 2025Updated last year
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆165Oct 27, 2024Updated last year
- an ida plugin used to decompile vmp☆404Jul 11, 2026Updated last month
- ☆26Jul 15, 2023Updated 3 years ago
- ☆52Feb 3, 2025Updated last year
- ☆58Apr 6, 2026Updated 4 months ago
- etw hook (syscall/infinity hook) compatible with the latest Windows version of PG☆350Apr 26, 2026Updated 3 months ago
- Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports …☆148Mar 13, 2026Updated 5 months ago
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆35Aug 5, 2026Updated last week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆224May 11, 2026Updated 3 months ago
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆182Sep 13, 2024Updated last year
- an encryption library designed for Windows kernel and driver programming☆123Aug 4, 2023Updated 3 years ago
- Windows CVE主防(HIPS/HIDS)☆57May 2, 2026Updated 3 months ago
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆139Jun 6, 2026Updated 2 months ago
- Hook NtDeviceIoControlFile with PatchGuard☆104May 10, 2022Updated 4 years ago
- 对debughelp的二次开发☆11Feb 20, 2023Updated 3 years ago
- 硬件虚拟化☆64Aug 13, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- r/w virtual memory without attach☆235Oct 19, 2023Updated 2 years ago
- windows rpc 使用MIDL+RPC实现HelloWorld☆24Mar 21, 2018Updated 8 years ago
- ☆122May 23, 2020Updated 6 years ago
- 一个仅使用2字节修改实现内核任意函数hook的方法。☆59May 17, 2025Updated last year
- This project can bypass most of the AC except for some perverts that enable VT to monitor page tables☆53May 16, 2024Updated 2 years ago
- Injector with kernel power☆18Jan 2, 2021Updated 5 years ago
- 可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。☆106Sep 1, 2022Updated 3 years ago