h311d1n3r / LetsHook
A Windows API hooking library !
☆30Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for LetsHook
- EDR PoC WIP LLC☆10Updated 9 months ago
- ☆29Updated 2 years ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.☆44Updated last year
- ☆15Updated last year
- An example of how to use Microsoft Windows Warbird technology☆25Updated last year
- .lib file for linking against the NT CRT☆20Updated 2 years ago
- Static library and headers for linking your software with ntdll.dll☆30Updated 4 years ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆19Updated last week
- A way to detect DBI frameworks, Debuggers and VMs.☆22Updated 4 years ago
- ollvm 4.0 using clang 10.0.1☆13Updated 3 years ago
- FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.☆18Updated last month
- XOrCryptEx lightweight C Utility/Algorithm☆11Updated 2 years ago
- Anti-Analysis technique, trick the debugger by Hiding events from it.☆18Updated 3 years ago
- A packed & protected Module Loader and more, for 64-bit Windows☆28Updated 3 years ago
- devirtualization vmprotect☆61Updated last year
- Hooking the GDT - Installing a Call Gate. POC for Rootkit Arsenal Book Second Edition (version 2022)☆69Updated last year
- WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs☆16Updated last year
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆62Updated last year
- A driver to implement IOCTL hooking☆23Updated 2 years ago
- X86/X64 Hardware Breakpoint Manager☆39Updated 3 years ago
- Fix VMProtect 3.xx (tested 3.0.9 to 3.5.0)☆16Updated 2 years ago
- Small project to generate fake DLLs based on an executable's import table☆23Updated 4 years ago
- Library for using direct system calls☆35Updated 4 years ago
- A library for intel VT-x hypervisor functionality supporting EPT shadowing.☆48Updated 3 years ago
- Input-output driver☆23Updated last year
- Plugin for x64dbg to disable parallel loading of dependencies☆19Updated 2 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- Fake Timestamps of Driver Certificates while keeping validity.☆16Updated 3 years ago