Alternatives and similar repositories for iHaek

Users that are interested in iHaek are comparing it to the libraries listed below

• sunnamed434 / UnityVulnerableEntryPoint
  Looks for a vulnerable entry point to bypass BE Anti Cheat or other in Ring3
  ☆18Updated 2 years ago
• xu-Wan / HypercallPageHook
  POC Hook of nt!HvcallCodeVa
  ☆52Updated 2 years ago
• kkent030315 / anyvtop
  x64 Windows implementation of virtual-address to physical-address translation
  ☆43Updated 4 years ago
• veryboreddd / Return-address-spoofer
  Illustrates the concept of return address spoofing, and how it is used.
  ☆13Updated 5 years ago
• miketestz / ScyllaHide_VMPHeavensgateBypass
  Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
  ☆22Updated last year
• weak1337 / CEDetector
  ☆46Updated 3 years ago
• weak1337 / ricochet_deobfuscator
  ☆51Updated 3 years ago
• kkent030315 / EvilHooker
  Function hooks in Windows NT Kernel
  ☆25Updated 4 years ago
• nelfo / PGHooker
  PAGE_GUARD based hooking library
  ☆48Updated 3 years ago
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆46Updated 2 years ago
• VollRagm / apphost-extract
  Extracts the files embedded inside of a .NET AppHost.
  ☆18Updated last year
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆21Updated 2 years ago
• sunwm518 / VMProtect-3-5-DEvirt
  VMProtect, VMP, Devirter, 3,5
  ☆108Updated 2 years ago
• nulledc0de / phantom_thread
  POC kernel driver with hidden system thread
  ☆14Updated last year
• Oliver-1-1 / NMI
  ☆13Updated last year
• SwenenzY / section-obfuscation
  PE Header (.rdata,.data,.text) obsfucation
  ☆37Updated 3 years ago
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆95Updated 3 years ago
• ch4ncellor / Inline-PatchFinder
  comparing data of module exports from disk and memory, then caching any differences.
  ☆26Updated 3 years ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆52Updated 3 years ago
• rmccrystal / modmap
  Modmap updated to work on Windows 11
  ☆28Updated 4 years ago
• weak1337 / SystemThreadFinder
  ☆80Updated 4 years ago
• backengineering / VDM
  Library to manipulate drivers that expose a physical memory read/write primitive.
  ☆30Updated 2 years ago
• 1hAck-0 / zeroimport
  ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…
  ☆47Updated 2 years ago
• ExpLife0011 / KeUserModeCallBack
  A Simple Example
  ☆22Updated 6 years ago
• ClaudeoPK / kbd_hookka
  hook KeyboardClassServiceCallback to prevent messing up sistema
  ☆25Updated last year
• Oliver-1-1 / EtwKeyboardDetection
  ☆32Updated 11 months ago
• Shhoya / MutantKiller
  VMP Mutation API Fix
  ☆43Updated 3 years ago
• xtremegamer1 / Illicit-memory-allocation
  This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …
  ☆15Updated 2 years ago
• YouNeverKnow00 / Disable-nmi-callbacks
  Disable NMI Callbacks with Kernelmode Driver
  ☆19Updated 2 years ago
• xtremegamer1 / vmdevirt-vtil
  ☆28Updated 2 years ago