Alternatives and similar repositories for KasR3Hook

Users that are interested in KasR3Hook are comparing it to the libraries listed below

• cbwang505 / unicorn-whpx
  跨平台模拟执行unicorn框架基于Qemu的TCG模式(Tiny Code Generator),以无硬件虚拟化支持方式实现全系统的虚拟化,支持跨平台和架构的CPU指令模拟,本文讨论是一款笔者的实验性项目采用Windows Hypervisor Platform虚拟机模式…
  ☆78Updated 2 years ago
• ResetMineMind / tinyKernelHook
  一个仅使用2字节修改实现内核任意函数hook的方法。
  ☆57Updated 8 months ago
• OMRI-FRX / check_EPT_hook
  无痕hook探测
  ☆45Updated 5 months ago
• DNLINYJ / DetectVMP3
  A POC to detect the exist of VMProtect 3 protection by search feature watermark.
  ☆84Updated 2 years ago
• smallzhong / kernel_monitor
  一个windows内核驱动分析框架，对内核所有导出函数进行挂钩监控
  ☆69Updated 2 months ago
• wbaby / xx_tvm
  ☆47Updated 2 years ago
• DearXiaoGui / InfinityHookPro-main
  ☆56Updated 3 years ago
• smallzhong / KernelHook
  一个用来做windows内核hook的框架
  ☆188Updated 9 months ago
• xia0ji233 / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆32Updated last year
• mizukiyyds / asm_obfuscator
  非编译时代码混淆，包括代码块拆分、代码乱序、常量加密、代码变异、抹除jcc、局部混淆等，主要提供框架以及思路
  ☆33Updated 2 years ago
• OMRI-FRX / LMalz
  硬件虚拟化
  ☆61Updated 5 months ago
• gn277 / ExceptionByInstCallback
  ☆51Updated last year
• thomasxm / Akira-obfuscator
  Another LLVM-obfuscator based on LLVM-17. A fork of Arkari
  ☆110Updated last year
• Hipepper / antiVM
  Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.
  ☆45Updated 3 years ago
• saileaxh / DetectNtoskrnlIntegrity
  Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe
  ☆15Updated 10 months ago
• lstaroth / AntiXorstr
  IDA Pro plugin AntiXorstr
  ☆153Updated 11 months ago
• kouzhudong / AntiHook
  Enum and Remove Hook in Windows
  ☆48Updated last month
• komimoe / llvm2019
  Visual Studio 2019/2022/2026 extension for building C/C++ projects with the LLVM Compiler Toolchain (installed separately).
  ☆27Updated last month
• za233 / NeacController
  Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution
  ☆65Updated 7 months ago
• fjqisba / QtMetaParser
  ida plugin to parse qt meta data
  ☆84Updated last year
• zzhouhe / VM_Analyze
  ☆90Updated 5 years ago
• fly55555 / ntoskrnl
  大部分常见windows内核文件合集 下方链接里有更多更全面的
  ☆16Updated 2 years ago
• killvxk / llvm-msvc-ex
  Forked LLVM focused on MSVC Compatibility. This version is designed for windows users
  ☆137Updated this week
• Oxygen1a1 / DrvMon
  a monitoring windows driver calls kernel api tools
  ☆126Updated last year
• DragonQuestHero / WindowsSyscallsEx
  Quick check of NT kernel exported&unexported functions/global variable offset NT内核导出以及未导出函数+全局变量偏移速查
  ☆98Updated 2 years ago
• szdyg / pdb_proxy
  ☆47Updated last year
• PspExitThread / SKT64
  Anti-Rootkit & System kernel management tool
  ☆50Updated last week
• A-Normal-User / Pretend_HideVirtualMemory
  利用物理内存映射，实现虚拟内存的伪隐藏
  ☆86Updated 3 years ago
• MiroKaku / HRSword-Portable
  https://www.huorong.cn/
  ☆15Updated last year
• Jhinxs / ntoskrnl
  收集常用windows版本内核文件
  ☆35Updated 2 years ago