Alternatives and similar repositories for Blackbone

Users that are interested in Blackbone are comparing it to the libraries listed below

• codereversing / hekate
  Winsock inspection/filtering/modifying
  ☆19Updated 3 years ago
• Ilyatk / HookEngine
  ☆32Updated 3 years ago
• dev-zzo / ntcore
  Simple standalone bundle of NT core APIs
  ☆25Updated 9 years ago
• wyyqyl / HideModule
  The dll that can hide itself and then delete itselft.
  ☆31Updated 12 years ago
• eschweiler / ProReversing
  Open and generic Anti-Anti Reversing Framework. Works in 32 and 64 bits.
  ☆66Updated 13 years ago
• tandasat / DumpVTable
  Generates a Python script to give public interface names in an ActiveX file to an IDB file.
  ☆50Updated 4 years ago
• eschweiler / DLL-Injector
  injects a DLL into a running process or starts a process with DLL being the very first one imported.
  ☆34Updated 13 years ago
• xwlan / dprobe
  Dynamic trace toolkit for Windows
  ☆52Updated 4 months ago
• MalwareTech / FstHook
  A library for intercepting native functions by hooking KiFastSystemCall
  ☆74Updated 5 years ago
• stephenfewer / OllyCallTrace
  OllyCallTrace is a plugin for OllyDbg to trace the call chain of a thread.
  ☆54Updated 14 years ago
• UIysse / Memory-Engine
  A c++, QT gui based memory engine
  ☆13Updated 7 years ago
• chen-charles / PEDetour
  modify binary Portable Executable to hook its export functions
  ☆66Updated 6 years ago
• Nukem9 / VirtualDbg
  Test code only. Not reliable for actual use.
  ☆61Updated 9 years ago
• Kirbiflint50 / KirbiDSM
  Decompile an x86 exe, and read PE infos.
  ☆19Updated 7 years ago
• streed / HideMyAss
  Hides a DLL and associated files based on a FILE_TAG as a user-mode injected DLL.
  ☆21Updated 12 years ago
• DeDf / HyperVisor
  ☆15Updated 9 years ago
• edix / HiddenProcessDetection
  Examples for detection of hidden processes on windows
  ☆35Updated 11 years ago
• x64dbg / StaticAnalysis
  Static analysis plugin for x64dbg (now deprecated).
  ☆29Updated 11 years ago
• FrankStain / pe-loader
  library, which help to describe or load and execute PE files.
  ☆55Updated 12 years ago
• stevemk14ebr / UniHook
  Intercept arbitrary functions at run-time, without knowing their typedefs
  ☆88Updated 8 years ago
• ChengChengCC / Windows-demo
  The demo on Windows
  ☆21Updated 9 years ago
• nopper / maltrace
  Maltrace is a simple syscall tracer for Windows implemented through the use of PIN.
  ☆24Updated 12 years ago
• nektra / vtbl-ida-pro-plugin
  Identifying Virtual Table Functions using VTBL IDA Pro Plugin + Deviare Hooking Engine
  ☆98Updated 12 years ago
• crackinglandia / aadp
  Anti-Anti-Debugger Plugins
  ☆19Updated 12 years ago
• mrexodia / CEAutoAttach
  Tool to automatically make Cheat Engine attach to a process via the command line.
  ☆29Updated 8 years ago
• avast / pelib
  PE file manipulation library.
  ☆64Updated 5 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• realgam3 / x64dbg-python
  Automating x64dbg using Python
  ☆36Updated 10 years ago
• wirepair / IDAPinLogger
  Logs instruction hits to a file which can be fed into IDA Pro to highlight which instructions were called.
  ☆42Updated 12 years ago
• Nukem9 / IDASkins
  *DEPRECATED* Advanced skinning plugin for IDA Pro, ported to x64dbg
  ☆32Updated 8 years ago