Alternatives and similar repositories for Gancho

Users that are interested in Gancho are comparing it to the libraries listed below

• rbmm / LIB
  ☆7Updated last month
• h311d1n3r / LetsHook
  A Windows API hooking library !
  ☆31Updated 2 years ago
• NUL0x4C / T.D.P.
  Using Thread Description To Hide Shellcodes
  ☆14Updated 2 years ago
• zer0condition / IDTHook-x86
  Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)
  ☆19Updated 2 years ago
• VoidSec / ida-helpers
  Collection of IDA helpers
  ☆16Updated 2 years ago
• am0nsec / masm64
  Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.
  ☆16Updated 4 years ago
• therealdreg / Win.Cerdalux
  WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs
  ☆18Updated last year
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• vmallet / ida-describekey
  IDA plugin to quickly learn what a shortcut does
  ☆10Updated 3 years ago
• ElvisBlue / emotet-deobfuscator
  IDA plugin to deobfuscate emotet CFF
  ☆17Updated 3 years ago
• hasherezade / pe_utils
  A set of small utilities, helpers for PIN tracers
  ☆33Updated last year
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆32Updated 5 years ago
• x0reaxeax / Fetch-n-Exec
  An x64 binary executing code that's not inside of it.
  ☆16Updated 2 years ago
• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆19Updated 7 months ago
• packing-box / bintropy
  Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
  ☆47Updated 5 months ago
• Broihon / SetDebugPrivilege
  ☆10Updated 4 years ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆16Updated 11 months ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆18Updated 3 years ago
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆28Updated 2 years ago
• hasherezade / pin_n_sieve
  An experimental dynamic malware unpacker based on Intel Pin and PE-sieve
  ☆60Updated 8 months ago
• 0xf005ba11 / bazel_ewdk_cc
  EWDK C++ toolchain for bazel
  ☆10Updated 11 months ago
• kkent030315 / anyelevate
  x64 Windows privilege elevation using anycall
  ☆21Updated 3 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆15Updated last year
• nblog / x64dbgpy3
  x64dbg python3 plugin
  ☆23Updated 3 weeks ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 3 years ago
• PELock / starter
  A small utility to run raw code chunks in the executable memory area.
  ☆14Updated 10 years ago
• killswitch-GUI / IsDebuggerPresent
  Debugger checks in 3 ways
  ☆19Updated 7 years ago
• hasherezade / libpeconv_and_detours_tpl
  A template for projects using both libPeConv and MS Detours
  ☆15Updated last year
• h4xu3lyn / NTLib
  Headers for linking your software with ntdll.dll
  ☆15Updated 4 years ago