mike1k / HookHunterLinks
Analyze patches in a process
☆255Updated 4 years ago
Alternatives and similar repositories for HookHunter
Users that are interested in HookHunter are comparing it to the libraries listed below
Sorting:
- Kernel LdrLoadDll injector☆262Updated 6 years ago
- Elevate a process to be a protected process☆151Updated 5 years ago
- x64 Windows PatchGuard bypass, register process-creation callbacks from unsigned code☆206Updated 4 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆335Updated 3 years ago
- Vectored Exception Handling Hooking Class☆163Updated 6 years ago
- A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.☆137Updated 3 years ago
- Browse Page Tables on Windows (Page Table Viewer)☆213Updated 3 years ago
- x86 Binary Code Virtualization Tool☆220Updated 6 months ago
- ☆153Updated 5 years ago
- C++ library for parsing and manipulating PE files statically and dynamically.☆88Updated last year
- Load your driver like win32k.sys☆254Updated 2 years ago
- Hygieia, a vulnerable driver traces scanner written in C++ as an x64 Windows kernel driver.☆144Updated 3 years ago
- A customizable process dumper.☆143Updated 6 years ago
- Easy Anti PatchGuard☆224Updated 4 years ago
- Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine☆272Updated 2 years ago
- Asynchronous Procedure Calls☆236Updated 4 years ago
- x86 PE Mutator☆223Updated 2 years ago
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆308Updated 5 years ago
- Tutorial & a blog post that demonstrate how to code a Windows driver to inject a custom DLL into all running processes. I coded it from s…☆136Updated 4 years ago
- Hooking kernel functions by abusing alignment☆245Updated 4 years ago
- ☆169Updated 7 years ago
- Windows inline hooking tool.☆281Updated 6 years ago
- Obfuscate calls to imports by patching in stubs☆69Updated 4 years ago
- Ghetto user mode emulation of Windows kernel drivers.☆145Updated 9 months ago
- Manual DLL Injector using Thread Hijacking.☆238Updated 7 years ago
- ☆184Updated 3 years ago
- PE-Dump-Fixer☆109Updated 5 years ago
- driver mapper / capcom wrapper☆221Updated 5 years ago
- Hide codes/data in the kernel address space.☆189Updated 4 years ago
- System call hook for Windows 10 20H1☆496Updated 4 years ago