Alternatives and similar repositories for HeavensGateHook

Users that are interested in HeavensGateHook are comparing it to the libraries listed below

• alal4465 / Practical-Reverse-Engineering-Solutions

  View on GitHub
  Some drivers I've written while solving exercises from Practical Reverse Engineering
  ☆15Jan 9, 2022Updated 4 years ago
• alfarom256 / MinifilterResearch

  View on GitHub
  ☆16Oct 31, 2022Updated 3 years ago
• GetRektBoy724 / Breaking-Detecting-Direct-Syscall-Techniques

  View on GitHub
  A repository filled with ideas to break/detect direct syscall techniques
  ☆27Apr 21, 2022Updated 3 years ago
• KelvinMsft / TechMyths

  View on GitHub
  ☆18Mar 28, 2023Updated 2 years ago
• gabriellandau / CISpotter

  View on GitHub
  Code Integrity Violation Spotter
  ☆17Jun 11, 2024Updated last year
• WithSecureLabs / TickTock

  View on GitHub
  ☆113Oct 10, 2022Updated 3 years ago
• Deputation / syscall_extractor

  View on GitHub
  A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.
  ☆21May 25, 2021Updated 4 years ago
• waleedassar / ALPC_CLIENT_SERVER

  View on GitHub
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Jan 25, 2022Updated 4 years ago
• passthehashbrowns / hook-integrity-checks

  View on GitHub
  ☆24May 28, 2021Updated 4 years ago
• ByteWhite1x1 / PatchGuardResearch

  View on GitHub
  Bypassing kernel patch protection runtime
  ☆21Feb 19, 2023Updated 2 years ago
• martinalebachew / Lighthouse

  View on GitHub
  Activate Windows & Office 🔑
  ☆13Jun 15, 2024Updated last year
• alfarom256 / UserVAtoPhysical

  View on GitHub
  Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address
  ☆23Nov 22, 2021Updated 4 years ago
• kkent030315 / EvilHooker

  View on GitHub
  Function hooks in Windows NT Kernel
  ☆27Oct 13, 2020Updated 5 years ago
• Nariod / Tartocitron

  View on GitHub
  Tartocitron is a repo to have fun with malwares and the Rust language. This repo provides working examples of dropper written in Rust.
  ☆11May 31, 2022Updated 3 years ago
• eversinc33 / urlExtract

  View on GitHub
  Recursively extract urls from a web page for reconnaissance.
  ☆12Jun 9, 2024Updated last year
• adrianyy / nasm_shellcode

  View on GitHub
  NASM listing to shellcode converter
  ☆14May 6, 2018Updated 7 years ago
• keowu / winsystemprogramming

  View on GitHub
  Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.
  ☆11Aug 8, 2022Updated 3 years ago
• mrd0x / NodeJSTools_LOLBIN

  View on GitHub
  ☆13Nov 24, 2021Updated 4 years ago
• 0xcpu / exthost

  View on GitHub
  A POC for Windows Extension Host hooking
  ☆24Jul 13, 2019Updated 6 years ago
• WolfyZ99 / Kernel-AntiCheat

  View on GitHub
  ☆70Aug 31, 2021Updated 4 years ago
• loneicewolf / exp312-osmr

  View on GitHub
  My Preparations for the "macOS Control Bypasses (EXP-312-osmr)" Course By OffensiveSecurity.
  ☆25Sep 22, 2021Updated 4 years ago
• nelfo / PGHooker

  View on GitHub
  PAGE_GUARD based hooking library
  ☆52Jul 25, 2022Updated 3 years ago
• rad9800 / BloatedHammer

  View on GitHub
  API Hammering with C++20
  ☆50Jul 21, 2022Updated 3 years ago
• gabriellandau / ShadowStackWalk

  View on GitHub
  Finding Truth in the Shadows
  ☆120Jan 26, 2023Updated 3 years ago
• perturbed-platypus / UEFIWriteCPP

  View on GitHub
  ☆12Aug 10, 2019Updated 6 years ago
• yuvatia / page-table-exploitation

  View on GitHub
  A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.
  ☆11Jun 11, 2018Updated 7 years ago
• hmnthabit / CVE-2018-19320-LPE

  View on GitHub
  CVE-2018-19320 LPE Exploit
  ☆10Jun 19, 2023Updated 2 years ago
• veil-ivy / Utils

  View on GitHub
  collection of code snippets,windbg,python scripts and resources
  ☆14Jul 11, 2022Updated 3 years ago
• eladyesh / Anti_Virus

  View on GitHub
  ☆12Apr 27, 2024Updated last year
• ch3rn0byl / Gremlins

  View on GitHub
  ☆14Sep 22, 2023Updated 2 years ago
• uf0o / windows-ps-callbacks-experiments

  View on GitHub
  Files for http://blog.deniable.org/posts/windows-callbacks/
  ☆77Feb 26, 2022Updated 3 years ago
• GetRektBoy724 / SharpHalos

  View on GitHub
  My implementation of Halo's Gate technique in C#
  ☆54Apr 20, 2022Updated 3 years ago
• GetRektBoy724 / HalosUnhooker

  View on GitHub
  Halos Gate-based NTAPI Unhooker
  ☆52Apr 21, 2022Updated 3 years ago
• rad9800 / VehApiResolve

  View on GitHub
  ☆118Aug 7, 2022Updated 3 years ago
• APTortellini / DoH-Stager

  View on GitHub
  ☆14Nov 29, 2021Updated 4 years ago
• WolfyZ99 / Kernel-RPM-WPM-with-Driver-Destroyer

  View on GitHub
  ☆12Jun 30, 2019Updated 6 years ago
• lem0nSec / Alcatraz

  View on GitHub
  An example of Windows self-replicating malware.
  ☆11Jan 16, 2023Updated 3 years ago
• tpn / windows-nt-file-system-internals-book

  View on GitHub
  Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.
  ☆20Jul 31, 2019Updated 6 years ago
• mq1n / ForceThreadSuspend

  View on GitHub
  Windows hidden thread suspend POC with code injection
  ☆12May 27, 2017Updated 8 years ago