learn-more / WindowsHookEx
A utility designed to investigate the behavior of the Windows api 'SetWindowsHookEx', and the behavior of the system when installing / calling hooks.
☆22Updated last year
Alternatives and similar repositories for WindowsHookEx:
Users that are interested in WindowsHookEx are comparing it to the libraries listed below
- A small library to extend the functionality of GetModuleHandle and GetProcAddress to other processes☆17Updated 5 years ago
- Analysing and defeating PatchGuard universally☆34Updated 4 years ago
- Small class to help perform syscalls.☆21Updated last year
- A class to gather information about a process, its threads and modules.☆24Updated 5 years ago
- Remote memory library in C++17.☆31Updated 6 years ago
- reveal and detect of common hooks under win32☆13Updated 4 years ago
- P2C Loader based on blackbone, used by isolation.top and others.☆14Updated 7 years ago
- Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…☆43Updated last year
- Injector with kernel power☆16Updated 4 years ago
- Abusing RtlAdjustPrivilege and NtSetInformationProcess to cause a BSOD from usermode☆17Updated 2 years ago
- A helper class for hardware breakpoints☆12Updated 4 years ago
- An example code of CiGetCertPublisherName☆14Updated 3 years ago
- ☆14Updated 6 years ago
- Memory Guard Library☆11Updated 4 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆23Updated 8 years ago
- I did a full in depth video explaining this here: https://www.youtube.com/watch?v=u2jFhdrHVg0&t=294s☆10Updated 3 years ago
- a driver to enumerate registered pnp callbacks for a particular interface class based on reversal of IoRegisterPlugPlayNotification☆11Updated last year
- Simple driver loader for windows☆18Updated 4 years ago
- Disable threat tracing from the kernel..☆13Updated 2 years ago
- A slightly safer io access library☆13Updated 3 years ago
- Example of making debugger using Hardware Breakpoint + VEH☆18Updated 3 years ago
- driver interface with dll-injection capabilities☆28Updated 4 years ago
- Some eternal WIP stuff :)☆16Updated last week
- ☆14Updated 4 years ago
- Nightshade is a Windows Memory Manipluation library specifically for injecting DLLs and Game Hacking☆14Updated 2 years ago
- Input-output driver☆24Updated last week
- Single header library to simplify the usage of direct syscalls. x64/x86☆11Updated 2 years ago
- Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling☆32Updated 5 years ago
- Driver Loader/BE Bypass/Win Malware(lol)☆34Updated 5 years ago
- Hijack a dll in a process to do something.☆12Updated 4 years ago