Alternatives and similar repositories for Gancho:

Users that are interested in Gancho are comparing it to the libraries listed below

• NUL0x4C / T.D.P.
  Using Thread Description To Hide Shellcodes
  ☆14Updated 2 years ago
• rbmm / LIB
  ☆7Updated 3 weeks ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆18Updated 3 years ago
• h311d1n3r / LetsHook
  A Windows API hooking library !
  ☆31Updated 2 years ago
• alal4465 / HeavensGateHook
  Hooking Heavens Gate in a weekend
  ☆13Updated 3 years ago
• zer0condition / IDTHook-x86
  Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)
  ☆19Updated 2 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 3 years ago
• VoidSec / ida-helpers
  Collection of IDA helpers
  ☆15Updated 2 years ago
• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆19Updated 6 months ago
• am0nsec / masm64
  Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.
  ☆16Updated 4 years ago
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆27Updated 2 years ago
• Broihon / SetDebugPrivilege
  ☆10Updated 4 years ago
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆11Updated last year
• nimrodpar / Obfvious
  ☆14Updated 4 years ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆16Updated 10 months ago
• ioncodes / pooldump
  ☆29Updated 3 years ago
• therealdreg / Win.Cerdalux
  WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs
  ☆18Updated last year
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• codereversing / ted_api
  ☆35Updated 2 years ago
• Jasper1467 / WindowsDefender_Rebuild
  An attempt at reversing WindowsDefender
  ☆20Updated 6 months ago
• AzAgarampur / CorsairLLeak
  Corsair LL Access driver abuse
  ☆22Updated 4 years ago
• jonomango / pe-builder
  Header-only C++ library for producing PE files.
  ☆32Updated last year
• Anal-Repair / gigabyte_gdrv3_exploit
  Rust program for interfacing with the gigabyte driver to gain access to powerful primitives such as arbitrary kernel memcpy.
  ☆17Updated 2 years ago
• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆39Updated 3 years ago
• un4ckn0wl3z / PCIE-Detector
  Sample/PoC Windows kernel driver for detect DMA devices by using Vendor ID and Device ID signatures
  ☆34Updated 7 months ago
• XaFF-XaFF / WinREPL
  WinREPL is a "read-eval-print loop" shell on Windows that is useful for testing/learning x86 and x64 assembly.
  ☆14Updated 2 years ago
• gmh5225 / Driver-SoulExtraction
  SoulExtraction is a windows driver library for extracting cert information in windows drivers
  ☆22Updated 2 years ago
• keowu / winsystemprogramming
  Learn Winapi in this Repo with examples, to understand its abstraction in reverse engineering for Windows.
  ☆10Updated 2 years ago
• nblog / x64dbgpy3
  x64dbg python3 plugin
  ☆22Updated this week
• x0reaxeax / Fetch-n-Exec
  An x64 binary executing code that's not inside of it.
  ☆16Updated 2 years ago