codereversing / sehveh_hookLinks
Hooking functions with structured and vectored exception handling
☆8Updated 2 years ago
Alternatives and similar repositories for sehveh_hook
Users that are interested in sehveh_hook are comparing it to the libraries listed below
Sorting:
- Sample debugger for x86 and x64☆4Updated 2 years ago
- Enumerate process modules manually☆9Updated 2 years ago
- Perform remote calls in x64☆7Updated 2 years ago
- Reverse engineering AddVectoredExceptionHandler☆3Updated 2 years ago
- Call undocumented native functions in the windows kernel☆5Updated 2 years ago
- Hooking functions with guard pages☆9Updated 2 years ago
- Hooking vtables☆10Updated 2 years ago
- Hook APIs and send data back to another process with Google Protobufs☆2Updated 2 years ago
- just an lite AntiRootkit for interesting☆23Updated 9 years ago
- Run one process as another under Windows☆11Updated 2 years ago
- An idea in hooking APIs by replacing calls that lead to them☆1Updated 2 years ago
- Try to transport the tcpip stack of ReactOS to Windows XP.☆17Updated 11 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆25Updated 11 years ago
- Windows Kernel Mode PCRE☆10Updated 10 years ago
- Diffing process heaps☆15Updated 2 years ago
- ☆14Updated 8 years ago
- A driverless driver that is supposed to be manually mapped, usually by using TDL exploit. The driver shows how to read/write to any proce…☆21Updated 7 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22Updated 8 years ago
- windows kernel File redirection☆20Updated 10 years ago
- reverse win7 32bit hotpatch implement☆9Updated 11 years ago
- Given a global name in IDA Pro, find all xrefs which are contained in an exported function.☆11Updated 8 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆19Updated 9 years ago
- Kernel-mode file scanner☆18Updated 6 years ago
- simple plugin for lastest olly versions to display the callstack☆16Updated 12 years ago
- ☆13Updated 9 years ago
- ☆17Updated 8 years ago
- ☆12Updated 8 years ago
- Shareds for kernel developement☆28Updated 11 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆23Updated 8 years ago
- ☆13Updated 6 years ago