Alternatives and similar repositories for LetsHook:

Users that are interested in LetsHook are comparing it to the libraries listed below

• oberrich / phnt_nightly
  Native API header files for the Process Hacker project (nightly).
  ☆25Updated this week
• opcode86 / SysCaller
  Single header library to simplify the usage of direct syscalls. x64/x86
  ☆11Updated last year
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆61Updated last year
• namazso / PawnIO
  Input-output driver
  ☆24Updated last year
• mrexodia / REToolSync
  Collaboration platform for reverse engineering tools.
  ☆39Updated last month
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆25Updated last year
• expend20 / x64dbg_ext
  Extensions for x64dbg written in Rust: Telescope and Unicorn powered disassembly
  ☆24Updated last year
• ioncodes / pooldump
  ☆29Updated 3 years ago
• P1tt1cus / FastSymApi
  FastSymApi - A Fast API PDB Symbol Cache Server that efficiently caches and compresses PDBs on disk for quick and repeated retrieval.
  ☆18Updated 3 months ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆34Updated 4 years ago
• HyperSine / siren-hypervisor
  ☆36Updated last year
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• fplu / Detector
  A way to detect DBI frameworks, Debuggers and VMs.
  ☆22Updated 4 years ago
• NewWorldComingSoon / UnknownField
  UnknownField is a tool based clang that obfuscating the order of fields to protect your C/C++ game or code.
  ☆44Updated 2 years ago
• mrexodia / MBR
  EDR PoC WIP LLC
  ☆10Updated 11 months ago
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆32Updated 5 years ago
• Midi12 / QueryWorkingSetExample
  Just an example of a well-known technique to detect memory tampering via Windows Working Sets.
  ☆16Updated 3 years ago
• Lima-X / Win32.Nebula
  A packed & protected Module Loader and more, for 64-bit Windows
  ☆28Updated 3 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆48Updated 3 years ago
• addrianyy / asmlib_x64
  x64 assembler library
  ☆32Updated 7 months ago
• crvvdev / intraceptor
  Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.
  ☆28Updated 2 years ago
• emlinhax / DriverTimestampFaker
  Fake Timestamps of Driver Certificates while keeping validity.
  ☆16Updated 3 years ago
• DownWithUp / WarbirdExamples
  An example of how to use Microsoft Windows Warbird technology
  ☆27Updated last year
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆22Updated last year
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆62Updated last year
• ioncodes / rapid-kdbg-hyperv
  ☆16Updated last year
• xtremegamer1 / vmdevirt-vtil
  ☆26Updated last year
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆19Updated last year
• kkent030315 / anyelevate
  x64 Windows privilege elevation using anycall
  ☆21Updated 3 years ago
• ajkhoury / pdbfetch
  Fetch PDB symbols directly from Microsoft's symbol servers
  ☆42Updated 3 years ago