Alternatives and similar repositories for PTE-Hook

Users that are interested in PTE-Hook are comparing it to the libraries listed below

• lennyRBLX / window_hijack

  View on GitHub
  Rendering on external windows via hijacking thread contexts, with notes on ValidateHwnd
  ☆14Jul 9, 2020Updated 5 years ago
• muturikaranja / disable-threat-tracing

  View on GitHub
  Disable threat tracing from the kernel..
  ☆13Apr 8, 2022Updated 3 years ago
• 1401199262 / NMIStackWalk

  View on GitHub
  ☆73Aug 31, 2022Updated 3 years ago
• WQARK / WQARK

  View on GitHub
  ☆26Jul 19, 2025Updated 6 months ago
• brew02 / BudgetEPT

  View on GitHub
  Create stealthy, inline, EPT-like hooks using SMAP and SMEP
  ☆60Oct 19, 2024Updated last year
• bytesundso / SneakCalls

  View on GitHub
  direct systemcalls with a modern c++20 interface.
  ☆45Jan 6, 2023Updated 3 years ago
• BerkanYildiz / EasyNT

  View on GitHub
  Windows Kernel API wrapper with simplified functions and enterprise driver extensions.
  ☆31Jul 8, 2025Updated 7 months ago
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• MapleSwan / PageTableHook

  View on GitHub
  ☆144Dec 10, 2022Updated 3 years ago
• Dy-Baby / PageTableHook

  View on GitHub
  ☆17Dec 18, 2022Updated 3 years ago
• yjugl / mitimon

  View on GitHub
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Oct 7, 2022Updated 3 years ago
• not-wlan / instrumentation-callbacks

  View on GitHub
  based on https://github.com/secrary/Hooking-via-InstrumentationCallback
  ☆73Oct 29, 2019Updated 6 years ago
• gmh5225 / warbird-example

  View on GitHub
  ☆24Jul 15, 2023Updated 2 years ago
• oakboat / FuckACEScreenshot

  View on GitHub
  ☆33Aug 26, 2025Updated 5 months ago
• 1401199262 / Hook-KdTrap

  View on GitHub
  ☆223Mar 11, 2023Updated 2 years ago
• WWFWT / TinyVT

  View on GitHub
  轻量级VT框架和Ept无痕HOOK，测试环境：WIN10 1903，WIN7
  ☆178Oct 28, 2022Updated 3 years ago
• cirosec / warbird-demos

  View on GitHub
  ☆44Nov 7, 2024Updated last year
• can1357 / uLua

  View on GitHub
  micro lua
  ☆21Sep 25, 2024Updated last year
• 1401199262 / HookHvcallCodeVa

  View on GitHub
  ☆23May 8, 2023Updated 2 years ago
• boom-cr3 / VTableKFunctionHook

  View on GitHub
  This project will give you an example how you can hook a kernel vtable function that cannot be directly called
  ☆84Dec 25, 2021Updated 4 years ago
• HollyZoe / ExceptionByInstCallback

  View on GitHub
  ☆51Aug 29, 2024Updated last year
• helloobaby / Nmi-Callback

  View on GitHub
  detect hypervisor with Nmi Callback
  ☆42Sep 25, 2022Updated 3 years ago
• OMRI-FRX / LMalz

  View on GitHub
  硬件虚拟化
  ☆63Aug 13, 2025Updated 6 months ago
• Peribunt / CTC

  View on GitHub
  Interprocess communication via a covert timing channel
  ☆26Oct 24, 2025Updated 3 months ago
• rogxo / ReadPhys

  View on GitHub
  r/w virtual memory without attach
  ☆216Oct 19, 2023Updated 2 years ago
• zhuhuibeishadiao / WskHttp

  View on GitHub
  Windows kernel drivers simple HTTP library for modern C++
  ☆40Jul 12, 2018Updated 7 years ago
• Kqlu666 / 3d-Injector

  View on GitHub
  ☆19Apr 14, 2023Updated 2 years ago
• r1cky33 / valorant-external-cheat

  View on GitHub
  ☆16Apr 10, 2025Updated 10 months ago
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆17Jun 22, 2022Updated 3 years ago
• GCHE1 / StrCrypt

  View on GitHub
  Compile-time string crypter library for C++
  ☆14May 7, 2021Updated 4 years ago
• Unkn0wnH4ck3r / pubg_sdk

  View on GitHub
  pubg_sdk
  ☆11Jul 26, 2020Updated 5 years ago
• KANKOSHEV / EasyAntiPatchGuard

  View on GitHub
  Easy Anti PatchGuard
  ☆10Apr 9, 2021Updated 4 years ago
• 0xGREG / better-shellcode

  View on GitHub
  A better way to write shell code
  ☆10May 28, 2021Updated 4 years ago
• iomeone / pwn3d_align

  View on GitHub
  Hooking Shadow and normal SSDT with Kaspersky Hypervisor and abusing alignment
  ☆26Dec 5, 2020Updated 5 years ago
• gmh5225 / Hook-HvlSwitchVirtualAddressSpace

  View on GitHub
  Not mine. Only for saving
  ☆26Jun 28, 2022Updated 3 years ago
• ThomasonZhao / InfinityHookProMax

  View on GitHub
  InfinityHookProMax: Make InfinityHook great great again
  ☆52Aug 25, 2023Updated 2 years ago
• Air14 / SymbolicAccess

  View on GitHub
  Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB
  ☆117May 29, 2025Updated 8 months ago
• EBalloon / MapPage

  View on GitHub
  Mapping your code on a 0x1000 size page
  ☆71May 20, 2022Updated 3 years ago
• yuvatia / page-table-exploitation

  View on GitHub
  A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.
  ☆11Jun 11, 2018Updated 7 years ago