Alternatives and similar repositories for HookTools

Users that are interested in HookTools are comparing it to the libraries listed below

• jay / gethooks
  GetHooks is a program designed for the passive detection and monitoring of hooks from a limited user account.
  ☆61Updated 4 years ago
• zodiacon / ObjectBrowser
  An alternative tool to Sysinternals WinObj tool (nicer icons!)
  ☆37Updated 7 years ago
• zodiacon / KernelObjectView
  View handles and object for each object type
  ☆64Updated 6 years ago
• AndreyBazhan / DbgExt
  Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).
  ☆69Updated 8 years ago
• packetzero / etwrealtime
  Example of real-time Windows ETW packet capture session
  ☆53Updated 8 years ago
• jschicht / SectorIo
  Kernel mode driver for writing to physical disk with SL_FORCE_DIRECT_WRITE
  ☆24Updated 11 years ago
• tandasat / DrvLoader
  A command line tool to load and unload a device driver.
  ☆47Updated 8 years ago
• kaimi-io / event-tracing-for-windows
  Library for ETW, ProcessTracker sample based on ETW
  ☆33Updated 8 years ago
• pstolarz / dumpext
  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…
  ☆84Updated last year
• tandasat / DebugLogger
  A software driver that lets you log kernel-mode debug output into a file on Windows.
  ☆107Updated 7 years ago
• lowleveldesign / lldext
  My commands and scripts extending WinDbg
  ☆41Updated 5 months ago
• zodiacon / ProcExpX
  ☆68Updated 3 years ago
• JKornev / hijacken
  Analyze and attack windows applications using dll hijacking vulnerabilities
  ☆58Updated 5 years ago
• NtRaiseHardError / Dreadnought
  PoC for detecting and dumping code injection (built and extended on UnRunPE)
  ☆57Updated 6 years ago
• ThunderCls / x64dbg_vs_dark
  x64dbg stylesheet like visual studio dark theme
  ☆42Updated 8 years ago
• MartinDrab / VrtuleTree
  VrtuleTree is a tool that displays information about driver and device objects present in the system and relations between them. Its func…
  ☆60Updated 4 years ago
• swwwolf / cbtest
  Windows kernel-mode callbacks tutorial driver
  ☆47Updated 9 years ago
• stephenfewer / OllyCallTrace
  OllyCallTrace is a plugin for OllyDbg to trace the call chain of a thread.
  ☆53Updated 13 years ago
• jnastarot / soul_eater
  it can extract functions from .dll, .exe, .sys and it be work! :)
  ☆39Updated 6 years ago
• DownWithUp / WhoCalls_C
  WhoCalls can query a directory of files, find the binaries, and search for a user specified Win API import. It and works with both 32-bit…
  ☆18Updated 3 years ago
• NtQuery / ScyllaPlugins
  Plugins for Scylla
  ☆20Updated 14 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• WalkingCat / SymDiff
  Diff tool for comparing symbols in PDB files
  ☆83Updated 5 years ago
• AaLl86 / retroware
  This repository contains some tools that I have written in the past
  ☆28Updated last year
• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆53Updated last year
• mq1n / Wow64SyscallHook
  Wow64 syscall hook
  ☆41Updated 8 years ago
• cclon / Proteibox
  a sandbox project by sudami
  ☆17Updated 7 years ago
• jnastarot / native_peloader
  PE(compressed dll) memory loader using nt api
  ☆45Updated 8 years ago
• andrew-boyarshin / LoaderWatch
  Windows 10 PE image loader (LDR) NTDLL component toolbox
  ☆49Updated 5 years ago
• FrankStain / pe-loader
  library, which help to describe or load and execute PE files.
  ☆54Updated 12 years ago