Alternatives and similar repositories for SSDT-Hook

Users that are interested in SSDT-Hook are comparing it to the libraries listed below

• xiaofen9 / SSDTHOOK

  View on GitHub
  An SSDT hook for Windows
  ☆62Oct 27, 2017Updated 8 years ago
• Cody2333 / SSDT_HOOK

  View on GitHub
  ssdt hook 框架的简单实现
  ☆14Jun 9, 2016Updated 9 years ago
• zhihanyue / anti-ransomware-minifilter

  View on GitHub
  A minifilter driver for detecting and blocking ransomware virus
  ☆27Mar 4, 2018Updated 7 years ago
• sam-b / ida-scripts

  View on GitHub
  Dumping ground for whatever IDA Pro scripts I write
  ☆16Oct 9, 2016Updated 9 years ago
• shun-yo / Spaniel

  View on GitHub
  Malware analysis tool based on taint analysis.
  ☆14Jan 29, 2022Updated 4 years ago
• pstolarz / dumpext

  View on GitHub
  WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…
  ☆84Aug 24, 2024Updated last year
• BeneficialCode / WmipCodeSamples

  View on GitHub
  What makes it page
  ☆17Aug 24, 2022Updated 3 years ago
• brock7 / winpooch

  View on GitHub
  ☆10Mar 30, 2016Updated 9 years ago
• MortenSchenk / Privilege_Shellcode

  View on GitHub
  Kernel Shellcode to add all privileges in token
  ☆15Mar 13, 2017Updated 8 years ago
• hostzhen / sysark

  View on GitHub
  Sysark全称system anti-rootkit，是我学习内核写的工具（2013年的代码，后续不会再更新），里面基本上所有的功能都是用内核实现的。这里只是实现了反rootkit部分功能，作为工具的话，本人觉得还欠完善，但作为学习，或有人需要。目前针对的是XP SP2，…
  ☆27Dec 26, 2017Updated 8 years ago
• Cr4sh / SimpleUnpacker

  View on GitHub
  Simple tool for unpacking packed/protected malware executables.
  ☆32Oct 27, 2011Updated 14 years ago
• wjcsharp / hf-2011

  View on GitHub
  Automatically exported from code.google.com/p/hf-2011
  ☆15Feb 12, 2016Updated 10 years ago
• shines77 / Antinvader2015

  View on GitHub
  An minifilter-based transparent encryptor on Windows.
  ☆30Feb 27, 2017Updated 8 years ago
• hackflame / ida_python_extractCode

  View on GitHub
  ida提取特征码脚本
  ☆56Nov 30, 2019Updated 6 years ago
• locasto / libdisorder

  View on GitHub
  A simple C library for entropy measurement of byte streams and other data.
  ☆14Dec 9, 2019Updated 6 years ago
• vallejocc / Malware-Analysis-Reports-Manual

  View on GitHub
  My manual analysis of malware families
  ☆13Jul 12, 2017Updated 8 years ago
• CiscoCXSecurity / CVE-2015-5119_walkthrough

  View on GitHub
  Archive from the article CVE-2015-5119 Flash ByteArray UaF: A beginner's walkthrough
  ☆13Sep 10, 2015Updated 10 years ago
• NtQuery / ScyllaPlugins

  View on GitHub
  Plugins for Scylla
  ☆20Sep 14, 2011Updated 14 years ago
• yedushusheng / FileEncryption

  View on GitHub
  File encryption based on DES and blowfish
  ☆15May 29, 2025Updated 8 months ago
• hyzhangzhy / WindowX

  View on GitHub
  给windows窗口全局添加一些功能。
  ☆21May 1, 2019Updated 6 years ago
• JokerMars / MiniEngine

  View on GitHub
  Final Transparent encrypted version
  ☆14Jan 10, 2017Updated 9 years ago
• helloobaby / infinityhookEx

  View on GitHub
  hook system call that on user mode
  ☆12Jan 27, 2022Updated 4 years ago
• purpleroc / Embedded_toolkit

  View on GitHub
  Some useful tools for all kinds of Embedded device.
  ☆11Oct 12, 2015Updated 10 years ago
• AlephNull314 / AbsoluteZero

  View on GitHub
  Anti-AV compilation
  ☆44Oct 4, 2013Updated 12 years ago
• haidragon / linux

  View on GitHub
  azazel反编译器 ftrace函数追踪 elfdemon 代码注入 lpv,skeksi,saruman 病毒 quenya 重建进程
  ☆19Aug 26, 2018Updated 7 years ago
• NtRaiseHardError / Providence

  View on GitHub
  Kernel-mode file scanner
  ☆19Jul 16, 2018Updated 7 years ago
• apriorit / backup_filter_driver_sample

  View on GitHub
  ☆13Apr 30, 2020Updated 5 years ago
• SanseoLab / ejUnpacker

  View on GitHub
  x64dbg scripts for finding OEP of packers
  ☆15Oct 22, 2018Updated 7 years ago
• moloch-- / Exploit-Demos

  View on GitHub
  How to write basic memory corruption exploits on Windows
  ☆28Sep 14, 2016Updated 9 years ago
• zodiacon / ObjDir

  View on GitHub
  Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.
  ☆22Sep 4, 2023Updated 2 years ago
• serializingme / emofishes

  View on GitHub
  Emofishes is a collection of proof-of-concepts that help improve, bypass or detect virtualized execution environments (focusing on the on…
  ☆15Jan 28, 2023Updated 3 years ago
• kernweak / Syscall-Monitor

  View on GitHub
  大表哥的Syscall-Monitor
  ☆34Jul 18, 2019Updated 6 years ago
• hasherezade / decryptors_archive

  View on GitHub
  Archive of ransomware decryptors
  ☆34Dec 7, 2017Updated 8 years ago
• neriberto / IDA-Pro-Scripts

  View on GitHub
  IDA Pro Scripts
  ☆37Feb 24, 2015Updated 10 years ago
• namjkee / ssdt.Recover.21yu3

  View on GitHub
  绕过卡巴斯基主动防御,加载驱动，unhook所有ssdt hook及shadow ssdt hook
  ☆38Sep 27, 2015Updated 10 years ago
• EvilKnight1986 / ProcessManage

  View on GitHub
  进程保护、进程过滤的小工程、主要亮点是在内核中对操作系统中的用户进行管理
  ☆16Nov 5, 2014Updated 11 years ago
• haidragon / KeInject

  View on GitHub
  win7 apc注入不支持win10
  ☆18Mar 29, 2019Updated 6 years ago
• bronzeMe / SSDT_Hook_x64

  View on GitHub
  ☆36Mar 22, 2017Updated 8 years ago
• ehabhussein / ollydbg-binary-execution-visualizer

  View on GitHub
  reverse engineering, visual binary analysis
  ☆24Jan 9, 2017Updated 9 years ago