Persistent IAT hooking application - based on bearparser
☆268Sep 18, 2022Updated 4 years ago
Alternatives and similar repositories for IAT_patcher
Users that are interested in IAT_patcher are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Sample libraries to be used with IAT Patcher☆37Oct 1, 2022Updated 4 years ago
- Portable Executable parsing library (from PE-bear)☆656Updated this week
- ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports pay…☆231Mar 22, 2023Updated 3 years ago
- A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl☆1,396Apr 18, 2026Updated 6 months ago
- Demos of various injection techniques found in malware☆793Feb 15, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- windows kernelmode and usermode IAT hook☆152Mar 9, 2021Updated 5 years ago
- Protects deletion of files with a specified extension using a kernel-mode driver.☆76Jul 16, 2018Updated 8 years ago
- Various snippets created during malware analysis☆466Oct 3, 2025Updated last year
- Decompiler for Code Virtualizer 1.3.8 (Oreans)☆92Oct 3, 2012Updated 14 years ago
- MBR manipulation tool☆18Jan 13, 2014Updated 12 years ago
- Add More Features for x64dbg Script System,with some Functions which will help Plugin Coder☆126Dec 26, 2021Updated 4 years ago
- Wow64 syscall hook☆43May 28, 2017Updated 9 years ago
- Demos of various (also non standard) persistence methods used by malware☆232Mar 5, 2023Updated 3 years ago
- IFL - Interactive Functions List (plugin for IDA Pro)☆502Jun 25, 2026Updated 4 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,935Jun 6, 2026Updated 4 months ago
- Two tools used during our analysis of the Microsoft binary injection mitigation implemented in Edge TH2.☆51Feb 15, 2017Updated 9 years ago
- PowerLoaderEx - Advanced Code Injection Technique for x32 / x64☆385Apr 17, 2017Updated 9 years ago
- Demo List cm/ps/ob/minifilter callback And Patch/Bypass it☆29Dec 5, 2017Updated 8 years ago
- A Pin Tool for tracing API calls etc☆1,715Jun 2, 2026Updated 5 months ago
- Small tool for disassembling shellcode (using objdump)☆149Jun 19, 2022Updated 4 years ago
- ViDi Visual Disassembler (experimental)☆80Oct 8, 2025Updated last year
- Kernel Shellcode to add all privileges in token☆15Mar 13, 2017Updated 9 years ago
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆64Jun 9, 2026Updated 4 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers☆913Jun 18, 2025Updated last year
- A Tool to Unpack Self-Modifying Code using DynamoRIO☆141Apr 17, 2017Updated 9 years ago
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago
- Elevation of privilege detector based on HyperPlatform☆124Mar 5, 2017Updated 9 years ago
- Windbg extension to find PatchGuard pages☆123Jun 24, 2014Updated 12 years ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆33Aug 7, 2019Updated 7 years ago
- Strings plugin for x64dbg☆247Updated this week
- VMAttack PlugIn for IDA Pro☆892Nov 30, 2017Updated 8 years ago
- Detours with just single dependency - NTDLL☆686Nov 25, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Kernel-mode file scanner☆19Jul 16, 2018Updated 8 years ago
- Collection of IDA helpers☆16Jul 25, 2022Updated 4 years ago
- Detecting execution of kernel memory where is not backed by any image file☆263Jul 11, 2018Updated 8 years ago
- The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support☆764Apr 24, 2025Updated last year
- modify binary Portable Executable to hook its export functions☆68Jan 13, 2019Updated 7 years ago
- IDA Pro script to add some useful runtime info to static analysis☆531Sep 5, 2022Updated 4 years ago
- ☆155Updated this week