Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary process.
☆189Jul 25, 2026Updated 3 months ago
Alternatives and similar repositories for AppInitHook
Users that are interested in AppInitHook are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- Sample x64dbg plugin to scan the stack during tracing.☆20Dec 19, 2016Updated 9 years ago
- NINA: No Injection, No Allocation x64 Process Injection Technique☆225Jun 9, 2020Updated 6 years ago
- Code Injection, Inject malicious payload via pagetables pml4.☆248Jul 7, 2021Updated 5 years ago
- UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …☆348Jul 3, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Kernel DLL Injector using NX Bit Swapping and VAD hide for hiding injected DLL☆221Nov 12, 2020Updated 5 years ago
- OffensivePH - use old Process Hacker driver to bypass several user-mode access controls☆330Oct 9, 2021Updated 5 years ago
- A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl☆1,394Apr 18, 2026Updated 6 months ago
- Fix VMProtect Import Protection☆387Aug 12, 2021Updated 5 years ago
- paste string formatted byte data block into x64dbg easy.☆41Jan 2, 2021Updated 5 years ago
- C++ STL in the Windows Kernel with C++ Exception Support☆444Aug 16, 2023Updated 3 years ago
- All Nt Syscall and W32k Syscall in one asm, include, and call it!☆58Nov 4, 2021Updated 4 years ago
- c++ implementation of windows heavens gate☆69Feb 12, 2021Updated 5 years ago
- Ghetto user mode emulation of Windows kernel drivers.☆168Oct 20, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆23Oct 28, 2020Updated 6 years ago
- 轻量级自动分析病毒程序调用上下文、游戏反调试实现技术平台☆100Jun 21, 2020Updated 6 years ago
- This project aims to facilitate debugging a kernel driver in windows by adding support for a code change on the fly without reboot/unload…☆173Apr 20, 2023Updated 3 years ago
- A VMP to VTIL lifter.☆469May 20, 2021Updated 5 years ago
- Analyze patches in a process☆264Jul 28, 2021Updated 5 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆350Oct 13, 2024Updated 2 years ago
- ☆24Sep 26, 2021Updated 5 years ago
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆893Feb 2, 2024Updated 2 years ago
- The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support☆764Apr 24, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.☆916Nov 21, 2019Updated 6 years ago
- Advanced driver monitoring utility.☆220Jul 8, 2026Updated 3 months ago
- Enumerate user mode shared memory mappings on Windows.☆134Feb 14, 2021Updated 5 years ago
- Detours with just single dependency - NTDLL☆686Nov 25, 2025Updated 11 months ago
- A class to gather information about a process, its threads and modules.☆21Mar 23, 2020Updated 6 years ago
- System call hook for Windows 10 20H1☆499Jun 26, 2021Updated 5 years ago
- PoC for hiding PE exports☆67Dec 19, 2020Updated 5 years ago
- InfinityHookPro Win7 -> Win11 latest☆564Feb 7, 2023Updated 3 years ago
- Global DLL injector☆69May 16, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆32Jan 12, 2022Updated 4 years ago
- proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC☆1,297May 1, 2024Updated 2 years ago
- Universal x86/x64 VMProtect 2.0-3.X Import fixer☆36Dec 29, 2021Updated 4 years ago
- PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)☆162May 27, 2021Updated 5 years ago
- VivienneVMM is a stealthy debugging framework implemented via an Intel VT-x hypervisor.☆839Sep 7, 2020Updated 6 years ago
- A mini anti-anti debug hooking library for Windows.☆106Jan 3, 2021Updated 5 years ago
- Evasive shellcode loader for bypassing event-based injection detection (PoC)☆834Aug 23, 2021Updated 5 years ago