Sentinel-One / minhookLinks
The Minimalistic x86/x64 API Hooking Library for Windows
☆34Updated 7 years ago
Alternatives and similar repositories for minhook
Users that are interested in minhook are comparing it to the libraries listed below
Sorting:
- ☆34Updated 8 years ago
- ☆50Updated 8 years ago
- Malware Analysis, Anti-Analysis, and Anti-Anti-Analysis☆45Updated 8 years ago
- PoC for Bypassing UM Hooks By Bruteforcing Intel Syscalls☆39Updated 10 years ago
- ☆82Updated 8 years ago
- Load a Windows Kernel Driver☆94Updated 8 years ago
- ☆51Updated 5 years ago
- A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext☆53Updated 7 years ago
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆45Updated 7 years ago
- Adding exceptions to Microsoft's Control Flow Guard (CFG)☆57Updated 9 years ago
- CAPE monitor DLLs☆41Updated 6 years ago
- Public repository for HEVD exploits☆19Updated 7 years ago
- Windows 10 UAC bypass PoC using LaunchInfSection☆35Updated 7 years ago
- ☆46Updated 7 years ago
- Windows Console Monitoring☆103Updated 8 years ago
- Process reimaging proof of concept code☆97Updated 6 years ago
- Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment☆124Updated 5 years ago
- Green shellcode challenge tools☆22Updated 6 years ago
- PoC for detecting and dumping process hollowing code injection☆52Updated 7 years ago
- Blog posts☆29Updated 5 years ago
- ☆28Updated 7 years ago
- A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.☆22Updated 7 years ago
- C++☆87Updated 9 years ago
- Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019☆42Updated 6 years ago
- User-mode hook bypassing method☆33Updated 9 years ago
- Windows 10 kernel and ntdll internal types, directly compatible with ida.☆53Updated 7 years ago
- A tool to help malware analysts tell that the sample is injecting code into other process.☆78Updated 10 years ago
- A simple API monitor for Windbg☆65Updated 8 years ago
- Bypass for the hardening against usage of tagWnd as a kernel read/write primitive☆32Updated 8 years ago
- Code injection via delay load libraries☆36Updated 8 years ago