Alternatives and similar repositories for Cpp-Hooking

Users that are interested in Cpp-Hooking are comparing it to the libraries listed below

• dslee2022 / VMProtect-CRC-Bypass
  PoC code for IsValidImageCRC()
  ☆18Updated 2 years ago
• buzzer-re / BulletTrain
  A manual PE mapping implementation, aka reflective loader
  ☆19Updated 2 years ago
• mzakocs / VirtualizationObfuscatorAnalysis
  A repository of IDA Databases and Binaries used for the analysis of popular commercial virtual-machine obfuscators
  ☆70Updated 2 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆66Updated last year
• xtremegamer1 / vmdevirt-vtil
  ☆27Updated last year
• jonomango / pe-builder
  Header-only C++ library for producing PE files.
  ☆33Updated last year
• mibho / x64dbg-vmp-trace
  unorthodox approach to analyze a trace, but this helped me get comfy with x64 instructions overall (excluding sse/avx/etc lol), cleared u…
  ☆60Updated last year
• 1hAck-0 / zeroimport
  ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…
  ☆47Updated 2 years ago
• BeneficialCode / KReClassEx
  Kernel ReClassEx
  ☆62Updated last year
• build-cpp / wdk_template
  Windows kernel driver template for cmkr (with testsigning).
  ☆33Updated last year
• vasie1337 / sharedsection-driver
  Driver that communicates using a shared section
  ☆57Updated 2 months ago
• jonomango / chum
  Binary rewriter for 64-bit PE files.
  ☆76Updated last year
• samshine / ScyllaHideDetector2
  Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.
  ☆26Updated 5 years ago
• mike1k / HardwareBreakpoint
  X86/X64 Hardware Breakpoint Manager
  ☆41Updated 3 years ago
• shaygitub / windows-rootkit
  windows rootkit
  ☆60Updated last year
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆62Updated 2 years ago
• Broihon / Symbol-Parser
  Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…
  ☆44Updated 2 years ago
• sodareverse / TDE
  A devirtualization engine for Themida.
  ☆100Updated last year
• sum-catnip / kptnhook
  windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking
  ☆54Updated 2 years ago
• GetRektBoy724 / KPDB
  Windows PDB parser for kernel-mode environment.
  ☆97Updated 2 years ago
• 0mWindyBug / KernelInjector
  PoC kernel to usermode injection
  ☆83Updated last year
• Oliver-1-1 / EtwKeyboardDetection
  ☆30Updated 8 months ago
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆36Updated last year
• nelfo / PGHooker
  PAGE_GUARD based hooking library
  ☆46Updated 2 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆65Updated last year
• Ahora57 / Unabomber
  Improved VMP Idea(detect anti-anti-debug tools by bug)
  ☆44Updated last year
• KiFilterFiberContext / VMP3-Disasm
  Experimental disassembler for x86 binaries virtualized by VMProtect 3
  ☆95Updated 2 years ago
• mrexodia / REToolSync
  Collaboration platform for reverse engineering tools.
  ☆40Updated 5 months ago
• zodiacon / KObjects
  Sample for Creating a new kernel object type and supporting API
  ☆24Updated 8 months ago
• ekknod / KiSystemStartupMeme
  Custom KiSystemStartup, can be used to modificate kernel before boot.
  ☆52Updated 3 years ago