使用 Intel 虚拟化特性实现应用层HOOK
☆66Sep 11, 2025Updated 10 months ago
Alternatives and similar repositories for KasR3Hook
Users that are interested in KasR3Hook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控☆77Nov 19, 2025Updated 8 months ago
- ☆27Jan 4, 2024Updated 2 years ago
- 一个用来做windows内核hook的框架☆187Apr 29, 2025Updated last year
- Enum and Remove Hook in Windows☆54Mar 28, 2026Updated 4 months ago
- ☆26Jul 19, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- 非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路☆35Mar 12, 2023Updated 3 years ago
- ☆48Sep 25, 2024Updated last year
- 从MmPfnData中枚举进程和页目录基址☆220Aug 18, 2023Updated 2 years ago
- a monitoring windows driver calls kernel api tools☆137Jul 5, 2024Updated 2 years ago
- Radical Windows ARK☆253Apr 18, 2025Updated last year
- ida plugin to parse qt meta data☆88Jan 15, 2025Updated last year
- 卓然主动防御源码（可执行文件+完整源码+完整作品报告）☆15Mar 5, 2019Updated 7 years ago
- A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.☆162Mar 26, 2024Updated 2 years ago
- 使用 frida stalker 实现的 trace☆29Dec 1, 2022Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Standard Kernel Library for Windows manipulation in C++☆216Jun 18, 2025Updated last year
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated last year
- an ida plugin used to decompile vmp☆397Jul 11, 2026Updated 2 weeks ago
- ☆26Jul 15, 2023Updated 3 years ago
- ☆50Feb 3, 2025Updated last year
- ☆58Apr 6, 2026Updated 3 months ago
- etw hook (syscall/infinity hook) compatible with the latest Windows version of PG☆347Apr 26, 2026Updated 3 months ago
- Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports …☆145Mar 13, 2026Updated 4 months ago
- Toolkits for KPH (KSystemInformer) Dynamic Data .☆32Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- Lightweight, dependency-free x86-64 CPU emulation library with Unicorn-like guest mode and direct host-memory execution.☆217May 11, 2026Updated 2 months ago
- a Windows kernel Pdb parsing and downloading library that running purely in kernel mode without any R3 programs.☆182Sep 13, 2024Updated last year
- an encryption library designed for Windows kernel and driver programming☆123Aug 4, 2023Updated 2 years ago
- ☆229Mar 11, 2023Updated 3 years ago
- Windows CVE主防(HIPS/HIDS)☆57May 2, 2026Updated 2 months ago
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆137Jun 6, 2026Updated last month
- Hook NtDeviceIoControlFile with PatchGuard☆104May 10, 2022Updated 4 years ago
- 对debughelp的二次开发☆11Feb 20, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 硬件虚拟化☆65Aug 13, 2025Updated 11 months ago
- r/w virtual memory without attach☆235Oct 19, 2023Updated 2 years ago
- windows rpc 使用MIDL+RPC实现HelloWorld☆24Mar 21, 2018Updated 8 years ago
- ☆191May 1, 2023Updated 3 years ago
- ☆123May 23, 2020Updated 6 years ago
- 一个仅使用2字节修改实现内核任意函数hook的方法。☆58May 17, 2025Updated last year
- This project can bypass most of the AC except for some perverts that enable VT to monitor page tables☆54May 16, 2024Updated 2 years ago