cs1ime/DICHook external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

cs1ime/DICHook

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/cs1ime/DICHook)

Close

cs1ime / DICHookView on GitHubMore

• External links
• Readme badge

Hook NtDeviceIoControlFile with PatchGuard

☆107May 10, 2022Updated 3 years ago

Alternatives and similar repositories for DICHook

Users that are interested in DICHook are comparing it to the libraries listed below

• DragonQuestHero / DwmDraw

  View on GitHub
  不使用3环挂钩进行DWM桌面绘制
  ☆82Dec 9, 2021Updated 4 years ago
• SDXT / MMInject

  View on GitHub
  Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL
  ☆219Nov 12, 2020Updated 5 years ago
• cs1ime / sehcall

  View on GitHub
  Windows X64 mode use seh in manual mapped dll or manual mapped sys
  ☆80Oct 10, 2022Updated 3 years ago
• IcEy-999 / Ntoskrnl_Viewer

  View on GitHub
  可在非测试模式下符号化读取内核内存。Kernel memory can be read symbolically in non test mode。
  ☆109Sep 1, 2022Updated 3 years ago
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• FaEryICE / MemScanner

  View on GitHub
  Analyze Windows x64 Kernel Memory Layout
  ☆129Nov 19, 2020Updated 5 years ago
• armasm / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆223Apr 9, 2021Updated 4 years ago
• boom-cr3 / VTableKFunctionHook

  View on GitHub
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆84Dec 25, 2021Updated 4 years ago
• 1401199262 / HookSwapContext

  View on GitHub
  ☆34Apr 11, 2023Updated 2 years ago
• zouxianyu / KernelHiddenExecute

  View on GitHub
  Hide codes/data in the kernel address space.
  ☆188May 8, 2021Updated 4 years ago
• MiroKaku / libwsk

  View on GitHub
  The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
  ☆284Jan 27, 2025Updated last year
• KelvinMsft / NoTruth

  View on GitHub
  ☆99Oct 6, 2017Updated 8 years ago
• kkent030315 / PageTableInjection

  View on GitHub
  Code Injection, Inject malicious payload via pagetables pml4.
  ☆243Jul 7, 2021Updated 4 years ago
• zouxianyu / PhysicalMemoryRW

  View on GitHub
  the basic version of the ring0 physical memory read/write tool
  ☆92Aug 18, 2019Updated 6 years ago
• Air14 / KDBGDecryptor

  View on GitHub
  A simple example how to decrypt kernel debugger data block
  ☆32Feb 8, 2021Updated 5 years ago
• xinnie-the-pooh / MS

  View on GitHub
  巨硬
  ☆17Oct 4, 2023Updated 2 years ago
• huoji120 / Etw-Syscall

  View on GitHub
  https://key08.com/index.php/2021/10/19/1375.html
  ☆71May 11, 2022Updated 3 years ago
• FiYHer / InfinityHookPro

  View on GitHub
  InfinityHookPro Win7 -> Win11 latest
  ☆551Feb 7, 2023Updated 3 years ago
• helloobaby / Nmi-Callback

  View on GitHub
  detect hypervisor with Nmi Callback
  ☆42Sep 25, 2022Updated 3 years ago
• KANKOSHEV / Detect-MouseClassServiceCallback

  View on GitHub
  mouseclassservicecallback detection via hook
  ☆52Feb 7, 2022Updated 4 years ago
• Kwansy98 / EasyPdb

  View on GitHub
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆158Mar 26, 2024Updated last year
• pr0tean / TelemetrySourcerer-patched

  View on GitHub
  Tiny driver patch to allow kernel callbacks to work on Win10 21h1
  ☆34Feb 7, 2022Updated 4 years ago
• Vicshann / GInjer

  View on GitHub
  Global DLL injector
  ☆71May 16, 2021Updated 4 years ago
• ZEROWyt / Patchguard-2023

  View on GitHub
  ☆23Jul 24, 2023Updated 2 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆207Aug 18, 2023Updated 2 years ago
• vmcall / owned_alignment

  View on GitHub
  Hooking kernel functions by abusing alignment
  ☆248Jan 5, 2021Updated 5 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• tcpie / hook_any_x64

  View on GitHub
  Easily hook WIN32 x64 functions
  ☆18Feb 19, 2025Updated last year
• muturikaranja / disable-threat-tracing

  View on GitHub
  Disable threat tracing from the kernel..
  ☆14Apr 8, 2022Updated 3 years ago
• TygoL / kdmapper-mdl

  View on GitHub
  ☆50Dec 19, 2023Updated 2 years ago
• IcEy-999 / Drv_Hide_And_Camouflage

  View on GitHub
  ☆308May 11, 2023Updated 2 years ago
• alexcub89 / BEClient2

  View on GitHub
  ☆35Jun 13, 2020Updated 5 years ago
• xu-Wan / HypercallPageHook

  View on GitHub
  POC Hook of nt!HvcallCodeVa
  ☆54May 8, 2023Updated 2 years ago
• SamuelTulach / windowhide

  View on GitHub
  Hide external overlay by using SetWindowDisplayAffinity
  ☆102Sep 5, 2021Updated 4 years ago
• wolk-1024 / CrossInject

  View on GitHub
  x86/x64 dll injector
  ☆31May 17, 2022Updated 3 years ago
• KANKOSHEV / Detect-KeAttachProcess

  View on GitHub
  Detect-KeAttachProcess by iterating through all processes as well as checking the context of the thread.
  ☆121Feb 8, 2022Updated 4 years ago
• KelvinMsft / UsbMon

  View on GitHub
  ☆39Oct 29, 2020Updated 5 years ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago