Shhoya/Shh0yaKernelHook external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

Shhoya/Shh0yaKernelHook

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/Shhoya/Shh0yaKernelHook)

Close

Shhoya / Shh0yaKernelHookView on GitHubMore

• External links
• Readme badge

Shh0ya Kernel Hook Driver

☆25Dec 8, 2020Updated 5 years ago

Alternatives and similar repositories for Shh0yaKernelHook

Users that are interested in Shh0yaKernelHook are comparing it to the libraries listed below

• guttir14 / HooksFinder

  View on GitHub
  Helps to find patched modules
  ☆30Oct 26, 2020Updated 5 years ago
• Shhoya / MutantKiller

  View on GitHub
  VMP Mutation API Fix
  ☆44Feb 17, 2022Updated 4 years ago
• mike024wk / KeHook64

  View on GitHub
  Kernel Hook X64
  ☆26Oct 11, 2020Updated 5 years ago
• somma / bob_dbg

  View on GitHub
  ☆10Aug 26, 2016Updated 9 years ago
• Zero-Tang / SimpleWhpDemo

  View on GitHub
  Simple Demo of using Windows Hypervisor Platform
  ☆29Jul 14, 2025Updated 7 months ago
• MortenSchenk / ACL_Edit

  View on GitHub
  Assembly code to use for Windows kernel shellcode to edit winlogon.exe ACL
  ☆13Mar 6, 2017Updated 8 years ago
• connormcgarr / Shellcode

  View on GitHub
  Various shellcodes
  ☆12Sep 1, 2020Updated 5 years ago
• Apxaey / Begineer-Friendly-Inline-Hooking-x86

  View on GitHub
  https://www.youtube.com/watch?v=qsjGj_L1kyo
  ☆10Jul 29, 2021Updated 4 years ago
• archercreat / Panda

  View on GitHub
  Panda - is a set of utilities used to research how PsExec encrypts its traffic.
  ☆12Apr 20, 2021Updated 4 years ago
• Aki2k / badeye

  View on GitHub
  handle elevation using bedaisy.
  ☆13Aug 17, 2020Updated 5 years ago
• n4r1b / WdFilter-Research

  View on GitHub
  Data and structures regarding the research done on WdFilter
  ☆12Apr 15, 2020Updated 5 years ago
• qq1045551070 / MyDebugger

  View on GitHub
  ☆14May 10, 2021Updated 4 years ago
• binsnake / icedpp

  View on GitHub
  A C++ wrapper for icedx86 decoder
  ☆49Jul 28, 2025Updated 7 months ago
• killvxk / Kernelmode-driver

  View on GitHub
  Simple IOCTL hooking driver for Kernel- User - Mode communication.
  ☆11Jul 26, 2020Updated 5 years ago
• Shhoya / Examples

  View on GitHub
  posting example
  ☆15May 11, 2020Updated 5 years ago
• jsacco / PPL_Bypass

  View on GitHub
  ☆12Apr 7, 2022Updated 3 years ago
• shubham0d / SymBlock

  View on GitHub
  A windows kernel driver to Block symbolic link exploit used for privilege escalation.
  ☆15Jul 30, 2020Updated 5 years ago
• Barracudach / Swap-control-ioctl

  View on GitHub
  Swap control lioctl with trampoline recording in the .text section
  ☆13Jul 1, 2021Updated 4 years ago
• theo-abel / xenith

  View on GitHub
  Research-focused hypervisor offering advanced tools for debugging, virtual machine introspection, and automation.
  ☆44Nov 21, 2025Updated 3 months ago
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Oct 7, 2022Updated 3 years ago
• MortenSchenk / Privilege_Shellcode

  View on GitHub
  Kernel Shellcode to add all privileges in token
  ☆15Mar 13, 2017Updated 8 years ago
• ioncodes / pooldump

  View on GitHub
  ☆31Jan 12, 2022Updated 4 years ago
• SHA-MRIZ / FsMinfilterHooking

  View on GitHub
  ☆33Dec 22, 2020Updated 5 years ago
• alal4465 / Practical-Reverse-Engineering-Solutions

  View on GitHub
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Jan 9, 2022Updated 4 years ago
• Y33Tcoder / EventSyncDriver

  View on GitHub
  Manually Mapped Windows Kernel Driver + Usermode API for Arbitrary R/W to UM process via a UM thread trapped in kernel, synchronized with…
  ☆15Dec 23, 2020Updated 5 years ago
• kasif-dekel / OSR_DeviceTree_Vuln

  View on GitHub
  ☆13Jan 12, 2022Updated 4 years ago
• xPasters / .data-ptr-swap

  View on GitHub
  i stole this from some guys private repo on github
  ☆58Jul 11, 2021Updated 4 years ago
• kkent030315 / CiGetCertPublisherName

  View on GitHub
  An example code of CiGetCertPublisherName
  ☆16Mar 24, 2022Updated 3 years ago
• rbmm / partial

  View on GitHub
  d
  ☆14Sep 5, 2025Updated 6 months ago
• Peribunt / Ret-Spoofing

  View on GitHub
  A minimalistic way to spoof return addresses without using exceptions
  ☆17Jul 26, 2022Updated 3 years ago
• ntoskrnl7 / win32-ex

  View on GitHub
  Win32 API Experimental(or Extension) features
  ☆38Nov 18, 2022Updated 3 years ago
• alfarom256 / MCP-PoC

  View on GitHub
  Minifilter Callback Patching Proof-of-Concept
  ☆74Oct 31, 2022Updated 3 years ago
• mike1k / ImportCallObfuscator

  View on GitHub
  Obfuscate calls to imports by patching in stubs
  ☆72Aug 4, 2021Updated 4 years ago
• mike1k / HookHunter

  View on GitHub
  Analyze patches in a process
  ☆259Jul 28, 2021Updated 4 years ago
• MortenSchenk / DataOnlyShellcode

  View on GitHub
  ☆18Mar 20, 2017Updated 8 years ago
• namazso / PEDiffGen

  View on GitHub
  Subtract one PE file from another!
  ☆20Oct 1, 2021Updated 4 years ago
• TrapaSecurity / Presentations

  View on GitHub
  ☆16Jun 23, 2024Updated last year
• hasherezade / pe_utils

  View on GitHub
  A set of small utilities, helpers for PIN tracers
  ☆37Feb 15, 2026Updated 2 weeks ago
• connormcgarr / Kernel-Escalation-of-Privileges-Payloads

  View on GitHub
  NT AUTHORITY\SYSTEM
  ☆43Jul 8, 2020Updated 5 years ago