Alternatives and similar repositories for Gancho:

Users that are interested in Gancho are comparing it to the libraries listed below

• rbmm / LIB
  ☆8Updated this week
• NUL0x4C / T.D.P.
  Using Thread Description To Hide Shellcodes
  ☆14Updated 2 years ago
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆10Updated 11 months ago
• zer0condition / IDTHook-x86
  Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)
  ☆19Updated last year
• am0nsec / masm64
  Collection of structures, prototype and examples for Microsoft Macro Assembler (MASM) x64.
  ☆16Updated 4 years ago
• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆18Updated 3 months ago
• VoidSec / ida-helpers
  Collection of IDA helpers
  ☆15Updated 2 years ago
• namazso / PawnIO
  Input-output driver
  ☆24Updated last year
• therealdreg / Win.Cerdalux
  WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs
  ☆17Updated last year
• Broihon / SetDebugPrivilege
  ☆10Updated 4 years ago
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆27Updated last year
• NewWorldComingSoon / llvm-msvc-windows-driver-template
  Windows kernel driver template for cmkr and llvm-msvc.
  ☆34Updated last year
• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆38Updated 3 years ago
• OrShazam / ChainEngine
  automates exploits using ROP chains, using ntdll-scraper
  ☆16Updated 2 years ago
• Lima-X / XOrCryptEx
  XOrCryptEx lightweight C Utility/Algorithm
  ☆11Updated 2 years ago
• crvvdev / obfuscator
  ollvm 4.0 using clang 10.0.1
  ☆13Updated 3 years ago
• d35ha / xPE
  Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling
  ☆31Updated 5 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• cocomelonc / 2022-01-24-malware-injection-15
  Process injection via KernelCallbackTable
  ☆14Updated 3 years ago
• LLVMParty / LLVMCMakeTemplate
  Collection of scripts and CMake files to easily link to LLVM into your project (Windows, Linux, macOS).
  ☆34Updated 3 months ago
• h311d1n3r / LetsHook
  A Windows API hooking library !
  ☆31Updated 2 years ago
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• namazso / PEDiffGen
  Subtract one PE file from another!
  ☆20Updated 3 years ago
• XaFF-XaFF / WinREPL
  WinREPL is a "read-eval-print loop" shell on Windows that is useful for testing/learning x86 and x64 assembly.
  ☆13Updated 2 years ago
• connormcgarr / Presentations
  ☆26Updated 3 months ago
• nimrodpar / Obfvious
  ☆14Updated 3 years ago
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆32Updated 5 years ago
• MahmoudZohdy / Anti-Analysis-DebuggerInjection
  Anti-Analysis technique, trick the debugger by Hiding events from it.
  ☆19Updated 3 years ago
• alal4465 / HeavensGateHook
  Hooking Heavens Gate in a weekend
  ☆13Updated 3 years ago
• Peribunt / Wow64-HeavensGate
  Basic utilities for executing, reading and writing 64-bit data in a 32-bit WoW64 process
  ☆16Updated 2 years ago