bb33bb/r3epthook external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

bb33bb/r3epthook

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/bb33bb/r3epthook)

Close

bb33bb / r3epthookView on GitHubMore

• External links
• Readme badge

使用vt进行无痕hook，支持r3

☆61Feb 1, 2019Updated 7 years ago

Alternatives and similar repositories for r3epthook

Users that are interested in r3epthook are comparing it to the libraries listed below

• zhuhuibeishadiao / PFHook

  View on GitHub
  Page fault hook use ept (Intel Virtualization Technology)
  ☆200Oct 19, 2016Updated 9 years ago
• qq1045551070 / VtToMe

  View on GitHub
  之前学习X64VT写的代码，很多坑，但是大体的逻辑还是完整的。现发出来给更多想学VT的人参考...
  ☆71Apr 26, 2021Updated 4 years ago
• KernelPanic-OpenSource / Win2K3_NT_drivers

  View on GitHub
  Windows Server 2K3 NT 5
  ☆12Apr 14, 2021Updated 4 years ago
• yqsy / VT_demo

  View on GitHub
  ☆28Nov 20, 2017Updated 8 years ago
• Shad0wB1ackCat / HyperVMsrHook

  View on GitHub
  Intel-VT-x/Hook Msr Build and Replace System Server Description Table.
  ☆17Mar 14, 2025Updated 11 months ago
• zouxianyu / PhysicalMemoryRW

  View on GitHub
  the basic version of the ring0 physical memory read/write tool
  ☆92Aug 18, 2019Updated 6 years ago
• mike024wk / KeHook64

  View on GitHub
  Kernel Hook X64
  ☆26Oct 11, 2020Updated 5 years ago
• WWFWT / TinyVT

  View on GitHub
  轻量级VT框架和Ept无痕HOOK，测试环境：WIN10 1903，WIN7
  ☆178Oct 28, 2022Updated 3 years ago
• TimelifeCzy / kHypervisorBasic

  View on GitHub
  VT Hook
  ☆51Jul 2, 2024Updated last year
• hsheep / vmpanalysis

  View on GitHub
  VMProtect analysis script
  ☆56Mar 31, 2020Updated 5 years ago
• helloobaby / HyperTool

  View on GitHub
  Intel learning hypervisor and some extend function
  ☆23Aug 23, 2025Updated 6 months ago
• qq1045551070 / ShotHv

  View on GitHub
  ShotHv
  ☆154Mar 8, 2022Updated 3 years ago
• zoand / BOOM

  View on GitHub
  A Memory Read And Write the Hide Driver
  ☆73Dec 2, 2020Updated 5 years ago
• KernelPanic-OpenSource / Win2K3_NT_sdktools

  View on GitHub
  Windows Server 2K3 NT 5
  ☆12Apr 17, 2021Updated 4 years ago
• zhuhuibeishadiao / MiniVTx64

  View on GitHub
  Intel Virtualization Technology demo
  ☆72Oct 15, 2016Updated 9 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• qq1045551070 / IoInject

  View on GitHub
  无痕注入1
  ☆77Jun 1, 2021Updated 4 years ago
• momo5502 / ept-hook-detection

  View on GitHub
  🪝 Various EPT hook detection approaches
  ☆143Feb 22, 2026Updated last week
• helloobaby / pdbtoheader

  View on GitHub
  pdb's function and global vars to offset
  ☆10Apr 11, 2023Updated 2 years ago
• roman-allen / FSFilterDriver

  View on GitHub
  Windows file system driver which allows to block access to files at run-time (C/C++, C#, WDK, SDK)
  ☆13Jan 1, 2023Updated 3 years ago
• h4xu3lyn / FuckPg

  View on GitHub
  Analysing and defeating PatchGuard universally
  ☆36Nov 4, 2020Updated 5 years ago
• zhuhuibeishadiao / PatchGuardResearch

  View on GitHub
  win10 pgContext dynamic dump (btc version)
  ☆110Jan 15, 2020Updated 6 years ago
• grace2017 / SecondProcess

  View on GitHub
  过TP驱动
  ☆28Feb 11, 2020Updated 6 years ago
• KelvinMsft / NoTruth

  View on GitHub
  ☆99Oct 6, 2017Updated 8 years ago
• 9176324 / Daat

  View on GitHub
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆77Oct 28, 2021Updated 4 years ago
• huoji120 / MakeInfinityHookGreatAgain

  View on GitHub
  让Etwhook再次伟大! Make InfinityHook Great Again!
  ☆147Jun 24, 2021Updated 4 years ago
• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• cs1ime / sehcall

  View on GitHub
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆80Oct 10, 2022Updated 3 years ago
• POPFD / HypervisorBase

  View on GitHub
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Mar 11, 2021Updated 4 years ago
• fIappy / FpVTProject

  View on GitHub
  intel vt-x hypervisor ept
  ☆25May 19, 2020Updated 5 years ago
• DragonQuestHero / Kernel-Anit-Anit-Debug-Plugins

  View on GitHub
  Kernel Anit Anit Debug Plugins 内核反反调试插件
  ☆480Aug 31, 2021Updated 4 years ago
• fengjixuchui / SharedMemory-By-Frankoo

  View on GitHub
  Kernel driver that uses Shared memory to communicate with UserMode
  ☆87Apr 25, 2019Updated 6 years ago
• amiryeshurun / HyperWin-Communication-Driver

  View on GitHub
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Jan 6, 2021Updated 5 years ago
• luciouskami / shadowMap

  View on GitHub
  bypass CRC
  ☆12May 3, 2018Updated 7 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆52Feb 7, 2022Updated 4 years ago
• zxd1994 / vt-debuuger

  View on GitHub
  a debugger use vt technology
  ☆356Jun 30, 2022Updated 3 years ago
• killvxk / Researchs

  View on GitHub
  一些研究
  ☆14Dec 18, 2019Updated 6 years ago
• DearXiaoGui / InfinityHookPro-main

  View on GitHub
  ☆56Nov 21, 2022Updated 3 years ago
• Gbps / CapcomLib

  View on GitHub
  A reflexive driver loader to bypass Windows DSE (featuring a custom PE loader)
  ☆44Sep 1, 2018Updated 7 years ago