Alternatives and similar repositories for LightHook:

Users that are interested in LightHook are comparing it to the libraries listed below

• BadPlayer555 / KernelGDIDraw
  The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.
  ☆272Updated 4 years ago
• waryas / KACE
  Emulate Drivers in RING3 with self context mapping or unicorn
  ☆312Updated 2 years ago
• Chemiculs / qengine
  C++ 17 or higher control flow obfuscation library for windows binaries
  ☆333Updated 4 months ago
• adrianyy / kernelhook
  Windows inline hooking tool.
  ☆240Updated 6 years ago
• chztbby / RebirthGuard
  Anti-cheat library for Windows C++
  ☆417Updated 2 years ago
• ryan-weil / ReadWriteDriver
  A kernel driver for reading and writing memory
  ☆280Updated last year
• MellowNight / AetherVisor
  Memory hacking library powered by AMD SVM
  ☆315Updated last year
• anzelesnik / SyscallHook
  System call hook for Windows 10 20H1
  ☆485Updated 3 years ago
• colby57 / VMP-Imports-Deobfuscator
  VMProtect 2.x-3.x x64 Import Deobfuscator
  ☆281Updated last year
• HoShiMin / Sig
  The most powerful and customizable binary pattern scanner
  ☆211Updated 3 years ago
• notpidgey / EagleVM
  Native code virtualizer for x64 binaries
  ☆457Updated 3 weeks ago
• annihilatorq / shadow_syscall
  windows syscalls with a single line and a high level of abstraction. has modern cpp20 wrappers and utilities, range-based DLL and export …
  ☆164Updated last month
• ch4ncellor / EAC-Reversal
  09/2021 reversal of EasyAntiCheat driver
  ☆210Updated 3 years ago
• SamuelTulach / memhv
  Minimalistic AMD-V/SVM hypervisor with memory introspection capabilities
  ☆193Updated 7 months ago
• herosi / classinformer
  IDA Class Informer plugin for IDA 8.x and 9.x
  ☆210Updated last month
• NaC-L / Mergen
  Deobfuscation via optimization with usage of LLVM IR and parsing assembly.
  ☆457Updated this week
• armvirus / CosMapper
  Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.
  ☆298Updated 3 years ago
• KANKOSHEV / NoScreen
  Hiding the window from screenshots using the function win32kfull::GreProtectSpriteContent
  ☆528Updated 3 weeks ago
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆267Updated 2 weeks ago
• backengineering / llvm-msvc
  [WIP] A forked version of LLVM-18 that prioritizes MSVC compatibility. This version is tailored for Windows users.
  ☆258Updated 2 weeks ago
• hoangprod / LeoSpecial-VEH-Hook
  Vectored Exception Handling Hooking Class
  ☆146Updated 6 years ago
• llxiaoyuan / oxorany
  obfuscated any constant encryption in compile time on any platform
  ☆424Updated last year
• dumbasPL / fumo_loader
  Fumo Loader - All in one kernel-based DLL injector
  ☆258Updated 2 weeks ago
• sondernextdoor / Poseidon
  Stealthy UM <-> KM communication system without creating any system threads, permanent hooks, driver objects, section objects or device o…
  ☆366Updated 10 months ago
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆252Updated 2 years ago
• Barracudach / CallStack-Spoofer
  This tool will allow you to spoof the return addresses of your functions as well as system functions.
  ☆432Updated 2 years ago
• weak1337 / NO_ACCESS_Protection
  ☆177Updated 3 years ago
• kweatherman / sigmakerex
  Enhanced IDA Pro signature generator plugin.
  ☆339Updated this week
• ccdescipline / CInject
  Windows Kernel inject (no module no thread)
  ☆269Updated 2 years ago
• Air14 / airhv
  Simple Intel VT-x hypervisor
  ☆276Updated last year