Alternatives and similar repositories for AntiHook

Users that are interested in AntiHook are comparing it to the libraries listed below

• NoHeart2019 / KasR3Hook

  View on GitHub
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆65Sep 11, 2025Updated 5 months ago
• KNSoft / KNSoft.NDK

  View on GitHub
  KNSoft.NDK provides native C/C++ definitions and import libraries for Windows NT.
  ☆20Feb 9, 2026Updated last week
• 1401199262 / UnsuccessfulDriver

  View on GitHub
  ☆17Apr 21, 2022Updated 3 years ago
• gognl / VMBR

  View on GitHub
  A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data
  ☆28Apr 27, 2024Updated last year
• MapleSwan / enum_real_dirbase

  View on GitHub
  从MmPfnData中枚举进程和页目录基址
  ☆205Aug 18, 2023Updated 2 years ago
• gmh5225 / warbird-example

  View on GitHub
  ☆24Jul 15, 2023Updated 2 years ago
• Oxygen1a1 / InfinityHook_latest

  View on GitHub
  etw hook (syscall/infinity hook) compatible with the latest Windows version of PG
  ☆320Apr 27, 2024Updated last year
• Kwansy98 / EasyPdb

  View on GitHub
  A very simple C++ library for download pdb, get rva of function, global variable and offset from struct.
  ☆157Mar 26, 2024Updated last year
• cbwang505 / windbg-uefi

  View on GitHub
  这篇文章的目的是介绍一款实验性项目基于COM命名管道或者Windows Hyper-V虚拟机Vmbus通道实现的运行在uefi上的windbg调试引擎开发心得
  ☆44Jun 16, 2024Updated last year
• rogxo / KernelHack

  View on GitHub
  Windows Kernel Misc
  ☆25Sep 3, 2023Updated 2 years ago
• bopin2020 / WindowsCamp

  View on GitHub
  Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&
  ☆62Jan 29, 2026Updated 2 weeks ago
• huaraz / ProxyIntercept

  View on GitHub
  Attempt to use WFP for proxy interception
  ☆10Jan 13, 2019Updated 7 years ago
• Midi12 / whse

  View on GitHub
  WinHvShellcodeEmulator (WHSE) is a shellcode emulator leveraging the Windows Hypervisor Platform API
  ☆26Apr 24, 2022Updated 3 years ago
• kouzhudong / HidePort

  View on GitHub
  Hide Port In Windows
  ☆42Oct 24, 2024Updated last year
• saereya / nightshade

  View on GitHub
  Nightshade is a Windows Memory Manipluation library specifically for injecting DLLs and Game Hacking
  ☆13Dec 12, 2022Updated 3 years ago
• kouzhudong / InjectDll

  View on GitHub
  Inject dll to process in driver
  ☆10Aug 27, 2024Updated last year
• Shad0wB1ackCat / AntiCheat

  View on GitHub
  A simple DLL injection protection driver.
  ☆12Dec 21, 2020Updated 5 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess

  View on GitHub
  Call NtCreateUserProcess directly as normal.
  ☆76May 17, 2022Updated 3 years ago
• BeneficialCode / WinArk

  View on GitHub
  Windows Anti-Rootkit Tool
  ☆542Dec 31, 2025Updated last month
• eversinc33 / unKover

  View on GitHub
  Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.
  ☆294Dec 10, 2025Updated 2 months ago
• boom-cr3 / NotifyRoutineHijackThread

  View on GitHub
  Hijack NotifyRoutine for a kernelmode thread
  ☆41Jun 4, 2022Updated 3 years ago
• ekknod / drvscan

  View on GitHub
  scan system / process integrity
  ☆350Oct 22, 2024Updated last year
• fjqisba / VmpHelper

  View on GitHub
  an ida plugin used to decompile vmp
  ☆369Jul 2, 2024Updated last year
• KANKOSHEV / Detect-HiddenThread-via-KPRCB

  View on GitHub
  Detect removed thread from PspCidTable.
  ☆75Mar 18, 2022Updated 3 years ago
• 1401199262 / Protect_Process

  View on GitHub
  ☆117Feb 11, 2022Updated 4 years ago
• singlefreshBird / Rootkit

  View on GitHub
  Rookit and anti rookit on Windows platform
  ☆14Apr 30, 2024Updated last year
• stuxnet147 / Win-Kernel-Logger

  View on GitHub
  A lock-free, high-performance logging system designed for Windows kernel drivers
  ☆24Mar 11, 2025Updated 11 months ago
• DownWithUp / WinPools

  View on GitHub
  WinPools is an example of how Windows kernel big pool addresses can be leaking using NtQuerySystemInformation
  ☆15Jun 23, 2019Updated 6 years ago
• shaygitub / windows-rootkit

  View on GitHub
  windows rootkit
  ☆60May 2, 2024Updated last year
• kitty8904 / blanket

  View on GitHub
  Hiding a system thread against conventional means of detection
  ☆42Oct 7, 2020Updated 5 years ago
• Dy-Baby / ReadWriteDriver

  View on GitHub
  ☆11Oct 24, 2022Updated 3 years ago
• rogxo / search

  View on GitHub
  A series of methods used to detect kernel shellcode for tencent game safe race 2024
  ☆45Apr 22, 2024Updated last year
• kouzhudong / libdrv

  View on GitHub
  Static Library For Windows Drivers
  ☆41Dec 13, 2025Updated 2 months ago
• J0xna / Kernel-Overlay-Hider

  View on GitHub
  ☆148Jan 24, 2024Updated 2 years ago
• Kqlu666 / Apc-Injector-Eac-Be

  View on GitHub
  ☆18Apr 9, 2024Updated last year
• kanren3 / libalpc

  View on GitHub
  ☆19Oct 25, 2024Updated last year
• bb107 / ServiceCall

  View on GitHub
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Oct 3, 2019Updated 6 years ago
• 1401199262 / RemoteCall

  View on GitHub
  ☆193May 1, 2023Updated 2 years ago
• jonomango / nohv

  View on GitHub
  Kernel driver for detecting Intel VT-x hypervisors.
  ☆192Jul 11, 2023Updated 2 years ago