cs1ime/DICHook external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

cs1ime/DICHook

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/cs1ime/DICHook)

Close

cs1ime / DICHookView on GitHubMore

• External links
• Readme badge

Hook NtDeviceIoControlFile with PatchGuard

☆104May 10, 2022Updated 4 years ago

Alternatives and similar repositories for DICHook

Users that are interested in DICHook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆85Dec 9, 2021Updated 4 years ago
• IcEy-999 / Ntoskrnl_Viewer

  View on GitHub
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆108Sep 1, 2022Updated 3 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆220Nov 12, 2020Updated 5 years ago
• cs1ime / sehcall

  View on GitHub
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆77Oct 10, 2022Updated 3 years ago
• kkent030315 / PageTableInjection

  View on GitHub
  Code Injection, Inject malicious payload via pagetables pml4.
  ☆244Jul 7, 2021Updated 5 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• zouxianyu / PhysicalMemoryRW

  View on GitHub
  the basic version of the ring0 physical memory read/write tool
  ☆91Aug 18, 2019Updated 7 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆220Apr 9, 2021Updated 5 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆186May 8, 2021Updated 5 years ago
• boom-cr3 / VTableKFunctionHook

  View on GitHub
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆80Dec 25, 2021Updated 4 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆143Dec 10, 2022Updated 3 years ago
• MiroKaku / libwsk

  View on GitHub
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆295Apr 30, 2026Updated 4 months ago
• IcEy-999 / Drv_Hide_And_Camouflage

  View on GitHub
  ☆317May 11, 2023Updated 3 years ago
• ZEROWyt / Patchguard-2023

  View on GitHub
  ☆24Jul 24, 2023Updated 3 years ago
• KelvinMsft / NoTruth

  View on GitHub
  ☆100Oct 6, 2017Updated 8 years ago
• Managed Database hosting by DigitalOcean • Ad
  PostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
• FaEryICE / MemScanner

  View on GitHub
  Analyze Windows x64 Kernel Memory Layout
  ☆134Nov 19, 2020Updated 5 years ago
• Kwansy98 / EasyPdb

  View on GitHub
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆162Mar 26, 2024Updated 2 years ago
• tcpie / hook_any_x64

  View on GitHub
  Easily hook WIN32 x64 functions
  ☆18Feb 19, 2025Updated last year
• muturikaranja / disable-threat-tracing

  View on GitHub
  Disable threat tracing from the kernel..
  ☆14Apr 8, 2022Updated 4 years ago
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆18Oct 4, 2023Updated 2 years ago
• Air14 / KDBGDecryptor

  View on GitHub
  A simple example how to decrypt kernel debugger data block
  ☆32Feb 8, 2021Updated 5 years ago
• pr0tean / TelemetrySourcerer-patched

  View on GitHub
  Tiny driver patch to allow kernel callbacks to work on Win10 21h1
  ☆34Feb 7, 2022Updated 4 years ago
• alexcub89 / BEClient2

  View on GitHub
  ☆35Jun 13, 2020Updated 6 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆224Aug 18, 2023Updated 3 years ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• FiYHer / InfinityHookPro

  View on GitHub
  InfinityHookPro Win7 -> Win11 latest
  ☆565Feb 7, 2023Updated 3 years ago
• DragonQuestHero / WindowsKernelPrivateSymbolsDump

  View on GitHub
  Win7内核私有符号结构转储
  ☆69Sep 3, 2021Updated 4 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆53Feb 7, 2022Updated 4 years ago
• vmcall / owned_alignment

  View on GitHub
  Hooking kernel functions by abusing alignment
  ☆250Jan 5, 2021Updated 5 years ago
• xu-Wan / HypercallPageHook

  View on GitHub
  POC Hook of nt!HvcallCodeVa
  ☆53May 8, 2023Updated 3 years ago
• wolk-1024 / CrossInject

  View on GitHub
  x86/x64 dll injector
  ☆32May 17, 2022Updated 4 years ago
• huoji120 / Etw-Syscall

  View on GitHub
  https://key08.com/index.php/2021/10/19/1375.html
  ☆69May 11, 2022Updated 4 years ago
• mackiiN / KernelHackBase

  View on GitHub
  ☆45Nov 26, 2020Updated 5 years ago
• Vicshann / GInjer

  View on GitHub
  Global DLL injector
  ☆69May 16, 2021Updated 5 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• kmlgping / IoCommon

  View on GitHub
  IO隐藏通信封装
  ☆17May 31, 2021Updated 5 years ago
• boom-cr3 / NotifyRoutineHijackThread

  View on GitHub
  Hijack NotifyRoutine for a kernelmode thread
  ☆38Jun 4, 2022Updated 4 years ago
• Oxygen1a1 / kcrypt

  View on GitHub
  an encryption library designed for Windows kernel and driver programming
  ☆122Aug 4, 2023Updated 3 years ago
• armasm / skprotect_source

  View on GitHub
  x64 free protect Features 1.process/thread handle protect 2.anti taskmgr.exe 3.hide process 4.anti-debugger(user/kernel debugger)
  ☆85Apr 3, 2019Updated 7 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess

  View on GitHub
  Call NtCreateUserProcess directly as normal.
  ☆77May 17, 2022Updated 4 years ago
• Sentient111 / KernelDrawing

  View on GitHub
  Drawing from kernelmode without any hooks
  ☆176Jul 7, 2022Updated 4 years ago
• auth12 / sysmap

  View on GitHub
  x64 manual mapper using inline syscalls
  ☆10Jul 8, 2021Updated 5 years ago