Alternatives and similar repositories for Gancho

Users that are interested in Gancho are comparing it to the libraries listed below

• rbmm / LIB
  ☆7Updated 2 months ago
• VoidSec / ida-helpers
  Collection of IDA helpers
  ☆16Updated 2 years ago
• NUL0x4C / T.D.P.
  Using Thread Description To Hide Shellcodes
  ☆14Updated 2 years ago
• zer0condition / IDTHook-x86
  Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)
  ☆20Updated 2 years ago
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• h311d1n3r / LetsHook
  A Windows API hooking library !
  ☆31Updated 2 years ago
• Broihon / SetDebugPrivilege
  ☆10Updated 4 years ago
• therealdreg / Win.Cerdalux
  WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs
  ☆18Updated last year
• vmallet / ida-describekey
  IDA plugin to quickly learn what a shortcut does
  ☆10Updated 3 years ago
• XaFF-XaFF / Assembler-MessageBox
  An Assembly x86 code that shows Windows MessageBox kept as simple as possible.
  ☆11Updated 2 years ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆19Updated 3 years ago
• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆19Updated 8 months ago
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆32Updated 5 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆11Updated last year
• 0xf005ba11 / bazel_ewdk_cc
  EWDK C++ toolchain for bazel
  ☆10Updated last year
• ElvisBlue / emotet-deobfuscator
  IDA plugin to deobfuscate emotet CFF
  ☆18Updated 3 years ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆16Updated last year
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 3 years ago
• namazso / PawnIO
  Input-output driver
  ☆27Updated 3 months ago
• nblog / x64dbgpy3
  x64dbg python3 plugin
  ☆23Updated 3 weeks ago
• codereversing / ted_api
  ☆35Updated 2 years ago
• Rantanen / ghidra-minidump-loader
  Windows Minidump loader for Ghidra
  ☆29Updated 2 years ago
• keowu / winsystemprogramming
  Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.
  ☆10Updated 2 years ago
• christianshub / process-injection-guard
  Signature scanner and API hooks to detect malicious process injection
  ☆27Updated 2 years ago
• ioncodes / pooldump
  ☆29Updated 3 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆15Updated last year
• am0nsec / masm64
  Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.
  ☆16Updated 4 years ago
• XaFF-XaFF / WinREPL
  WinREPL is a "read-eval-print loop" shell on Windows that is useful for testing/learning x86 and x64 assembly.
  ☆17Updated 2 years ago
• OrShazam / ChainEngine
  automates exploits using ROP chains, using ntdll-scraper
  ☆16Updated 3 years ago