Different API Hooking Techniques - Ring3 (Detours, Trampoline, IAT and EAT) for both, x64 and x32 PE files - Since 2014.
☆19Jan 19, 2025Updated last year
Alternatives and similar repositories for API-Hooking
Users that are interested in API-Hooking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dll hijack -- just one macro☆13Jul 3, 2023Updated 2 years ago
- wireshark的protobuf协议插件☆11Sep 21, 2016Updated 9 years ago
- Z2A-BlackLotus Challenge stage 2 bootkit-rootkit analysis☆17May 29, 2023Updated 3 years ago
- 针对windows rootkit的一些检测，分别从进程、端口、文件这三个方面进行检测。☆21Jan 16, 2025Updated last year
- Assembly/Shellcode☆16Oct 28, 2014Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hook IDT vector 0xb2 to detect SCI in 64bit windows.☆34Aug 27, 2022Updated 3 years ago
- LPE exploit for a UAF in Windows (CVE-2021-40449).☆45Nov 5, 2021Updated 4 years ago
- Implements Windows API hooks in modern C++☆16Aug 6, 2018Updated 7 years ago
- exploit dev. stuff☆20Aug 7, 2012Updated 13 years ago
- A collection of cpuid instruction implementations for anti-vm purposes.☆10Oct 5, 2023Updated 2 years ago
- free HWID spoofer loader with keyauth☆14Sep 4, 2022Updated 3 years ago
- Random UI Fuzzer (Monkey-Fuzzer) for finding bugs in Windows Forms☆10Oct 27, 2019Updated 6 years ago
- Shellcode Spider of Exploit-DB☆11Oct 17, 2017Updated 8 years ago
- 免杀绕过某60，过核晶，vt爆6个☆13May 1, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A bootkit to bypass Windows login (WIP)☆10Oct 25, 2023Updated 2 years ago
- ☆16Updated this week
- Direct syscalls Injection to bypass AV/EDR☆11May 18, 2024Updated 2 years ago
- Simple dll injector that uses thread hijacking to execute the payload☆14Jul 7, 2022Updated 3 years ago
- Static analysis plugin for x64dbg (now deprecated).☆29Jul 13, 2014Updated 11 years ago
- NASM listing to shellcode converter☆14May 6, 2018Updated 8 years ago
- Radio.Garden desktop app and game overlay☆12Apr 10, 2023Updated 3 years ago
- Assembly API block that uses CRC32 for resolving Windows API function addresses☆19May 19, 2023Updated 3 years ago
- 监视Windows系统下程序执行过程中的API调用，采用Ring3 Hook方式进行监控，记录API调用，分析软件行为。☆32Jul 1, 2012Updated 13 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Old-school VGA programming, in assembly. Learn as I learn, see the stupid things I do, tell me what I'm doing wrong.☆10Dec 29, 2018Updated 7 years ago
- Locust.io Awesomeness is here☆13Oct 11, 2017Updated 8 years ago
- Windows Internals 7th book but free (PDF)☆26Dec 3, 2024Updated last year
- A Proof-of-Concept win32 DLL that makes use of netbios session token replay to propagate through a Windows Domain☆25Apr 14, 2018Updated 8 years ago
- UEFI bootkit: Hardware Implant. In-Progress☆15Mar 7, 2022Updated 4 years ago
- BloodHound Automation: Collection, Analysis and Data Import☆21May 11, 2026Updated 3 weeks ago
- Shellcode Loader Library.☆15Sep 21, 2025Updated 8 months ago
- Windows hidden thread suspend POC with code injection☆12May 27, 2017Updated 9 years ago
- A reimagining of Steve Wozniak's Wozmon for AMD64☆10Jul 9, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 管道实现的进程间通信库，多线程支持☆31Aug 28, 2018Updated 7 years ago
- windows 10 14393 LPE☆98Oct 28, 2021Updated 4 years ago
- A simple UEFI bootkit made by @NSG650 and me.☆27Dec 29, 2024Updated last year
- A PoC for CVE-2018-7249☆15Apr 29, 2025Updated last year
- Pine and Frida better together☆15Oct 30, 2024Updated last year
- more at http://www.zer0mem.sk/?p=271☆12Jun 11, 2013Updated 12 years ago
- Compare A/AAAA DNS record for any domain in your browser by DoH JSON API.☆12Nov 13, 2023Updated 2 years ago