Surgical x64 VEH/VCH dumper. Walks the vectored exception handler list, extracts each handler as a standalone PE64 that IDA opens directly with resolved imports.
☆20Jul 17, 2026Updated 3 months ago
Alternatives and similar repositories for veh-dumper
Users that are interested in veh-dumper are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- portable executable file parser written in modern c++ (20)☆27Updated this week
- DLL Injector leveraging EAC for injection☆19Apr 15, 2025Updated last year
- ☆22Apr 5, 2026Updated 6 months ago
- Related to my article @ https://ckoi.dev/blog/breaking-claude-code/☆20Aug 19, 2026Updated 2 months ago
- usermode thread hijacking detection via working set page fault monitoring☆43Jul 17, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- AMD-V nested hypervisor research driver for Windows: NPT virtualization, NPT hooks, CR3 protection suite, X-deny syscall sensing + behavi…☆17Oct 14, 2026Updated 2 weeks ago
- injects a payload into explorer.exe, which creates a window in band 4 (ZBID_IMMERSIVE_NOTIFICATION)☆14May 5, 2026Updated 5 months ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- Various novel EPT/NPT hook detection mechanisms.☆27Mar 20, 2026Updated 7 months ago
- PoC kernel to usermode injection☆142Feb 26, 2024Updated 2 years ago
- ☆38Sep 26, 2024Updated 2 years ago
- A React component library for SF Symbols icons.☆14Sep 6, 2026Updated last month
- tests to catch some sloppy hv impls☆37Mar 16, 2026Updated 7 months ago
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆187Oct 21, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Experiment with PAGE_GUARD protection to hide memory from other processes☆60Jun 24, 2024Updated 2 years ago
- An advanced library for protecting/obfuscating kernel drivers using the C++ 17 standard.☆52May 7, 2026Updated 5 months ago
- Detecting window hijacking via ETW and GDI table scanning☆33Apr 11, 2026Updated 6 months ago
- Inline syscalls, hidden calls : - Resolves syscall IDs dynamically at runtime - Uses PE parsing to avoid runtime memory patching - Writte…☆15Jan 2, 2025Updated last year
- UEFI SMM payload mapper with hot reload for on-hardware development☆31Jul 5, 2026Updated 3 months ago
- C++ library interact with Java apps (including stealthy hooks)☆32Oct 21, 2026Updated last week
- A Dataptr Com Injector made for personal use in combination with Code Virtualizor/LLVM for personal use.☆19Apr 23, 2026Updated 6 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆153Aug 18, 2026Updated 2 months ago
- A Windows runtime analysis toolkit combining memory scanning, debugging, automation, and AI-friendly APIs.☆31Oct 22, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆19Dec 3, 2025Updated 10 months ago
- ☆20Apr 20, 2025Updated last year
- Experimental static analysis framework.☆15Apr 17, 2024Updated 2 years ago
- Finding SSDT address on windows 10 64bit☆14Sep 10, 2022Updated 4 years ago
- ☆26Oct 11, 2026Updated 2 weeks ago
- Example of hooking Present function for DirectX11 render using ImGui☆16Oct 31, 2024Updated last year
- Windows kernel driver that detects hypervisors by probing SIDT/LIDT edge cases, paging/TLB behaviors, privilege transitions, and timing e…☆50Mar 3, 2026Updated 7 months ago
- A simple DLL that can intercept HID messages and pass them on to the real HID DLL, while logging the data.☆23Oct 3, 2014Updated 12 years ago
- SMM driver/rootkit for platform memory access with R3 <-> R0 <-> R-2 communication.☆129Oct 15, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]☆99Updated this week
- x86-64 Symbolic Execution & LLVM IR Lifting Framework for Deobfuscation☆122Updated this week
- Reverse engineering and live validation of the Windows Endpoint Security Platform preview☆18Sep 11, 2026Updated last month
- Immediate-mode app platform — an Electron alternative with real GPU graphics. C++ 2D/3D renderer with optional Dawn/WebGPU backend, embed…☆32May 11, 2026Updated 5 months ago
- Deobfuscation and Analysis of Ring-1.io☆113Feb 7, 2026Updated 8 months ago
- BEClient2.dll Dumper☆24Jul 9, 2020Updated 6 years ago
- Reversing EasyAntiCheat 😎☆16Jun 6, 2026Updated 4 months ago