Alternatives and similar repositories for HookTools

Users that are interested in HookTools are comparing it to the libraries listed below

• jay / gethooks
  GetHooks is a program designed for the passive detection and monitoring of hooks from a limited user account.
  ☆61Updated 3 years ago
• NtRaiseHardError / Dreadnought
  PoC for detecting and dumping code injection (built and extended on UnRunPE)
  ☆56Updated 6 years ago
• jschicht / SectorIo
  Kernel mode driver for writing to physical disk with SL_FORCE_DIRECT_WRITE
  ☆24Updated 10 years ago
• swwwolf / cbtest
  Windows kernel-mode callbacks tutorial driver
  ☆47Updated 8 years ago
• kaimi-io / event-tracing-for-windows
  Library for ETW, ProcessTracker sample based on ETW
  ☆33Updated 8 years ago
• pstolarz / dumpext
  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…
  ☆83Updated 10 months ago
• packetzero / etwrealtime
  Example of real-time Windows ETW packet capture session
  ☆53Updated 8 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• cclon / Proteibox
  a sandbox project by sudami
  ☆17Updated 6 years ago
• Mattiwatti / BSOD10
  Crash Windows 10 up to RS2 from an unprivileged process
  ☆41Updated 7 years ago
• zodiacon / KernelObjectView
  View handles and object for each object type
  ☆65Updated 5 years ago
• AaLl86 / retroware
  This repository contains some tools that I have written in the past
  ☆28Updated last year
• tandasat / DrvLoader
  A command line tool to load and unload a device driver.
  ☆47Updated 8 years ago
• MartinDrab / VrtuleTree
  VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its func…
  ☆59Updated 4 years ago
• sin5678 / A-Protect
  A-Protect Anti Rootkit Tool
  ☆54Updated 11 years ago
• JKornev / hijacken
  Analyze and attack windows applications using dll hijacking vulnerabilities
  ☆57Updated 5 years ago
• tandasat / DebugLogger
  A software driver that lets you log kernel-mode debug output into a file on Windows.
  ☆107Updated 6 years ago
• hzqst / hidden
  Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc
  ☆16Updated 6 years ago
• AntiRootkit / BDArkit
  just an lite AntiRootkit for interesting
  ☆23Updated 9 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• KelvinMsft / ScreenCapAttack
  ☆33Updated 4 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 8 years ago
• jnastarot / native_peloader
  PE(compressed dll) memory loader using nt api
  ☆44Updated 8 years ago
• AndreyBazhan / DbgExt
  Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
  ☆69Updated 8 years ago
• FrankStain / pe-loader
  library, which help to describe or load and execute PE files.
  ☆54Updated 12 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 7 years ago
• michael4338 / TDI
  Windows Kernel Driver - Create a driver device in TDI layer of windows kernel to capture network data packets
  ☆37Updated 10 years ago
• zodiacon / ObjectBrowser
  An alternative tool to Sysinternals WinObj tool (nicer icons!)
  ☆36Updated 6 years ago
• MeeSong / Sunstrider
  Analyze PatchGuard
  ☆58Updated 6 years ago
• KurapicaBS / x64_tracer
  x64dbg conditional branches logger [Plugin]
  ☆71Updated 8 years ago