Alternatives and similar repositories for SSDT-Hook

Users that are interested in SSDT-Hook are comparing it to the libraries listed below

• NtRaiseHardError / UnRunPE
  PoC for detecting and dumping process hollowing code injection
  ☆53Updated 7 years ago
• kernweak / Syscall-Monitor
  大表哥的Syscall-Monitor
  ☆34Updated 6 years ago
• GravitLauncher / Avanguard
  fork HoShiMin Avanguard
  ☆20Updated 7 years ago
• Nerlant / SyscallDumper
  ☆19Updated 6 years ago
• zhihanyue / anti-ransomware-minifilter
  A minifilter driver for detecting and blocking ransomware virus
  ☆27Updated 7 years ago
• xiaobfly / AnalyzePdb
  ☆27Updated 6 years ago
• swatkat / arkitlib
  Windows anti-rootkit library
  ☆36Updated 10 years ago
• DeDf / HookSyscall64
  ☆39Updated 9 years ago
• KelvinMsft / ScreenCapAttack
  ☆33Updated 5 years ago
• yuvatia / Win10GdiExploitation
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Updated 7 years ago
• rwfpl / rewolf-ldrdebug
  Helper utility for debugging windows PE/PE+ loader.
  ☆52Updated 10 years ago
• NtRaiseHardError / Dreadnought
  PoC for detecting and dumping code injection (built and extended on UnRunPE)
  ☆58Updated 7 years ago
• wes4m / unHooker
  Kernel (Ring0) - SSDT unhook driver
  ☆15Updated 7 years ago
• NtRaiseHardError / Providence
  Kernel-mode file scanner
  ☆19Updated 7 years ago
• DOGSHITD / IDTHook_X64
  Hook IDT vector 0xb2 to detect SCI in 64bit windows.
  ☆34Updated 3 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆44Updated 8 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆32Updated 8 years ago
• Microwave89 / drvtricks
  drvtriks kernel driver for Windows 7 SP1 and 8.1 x64, that tricks around in your system.
  ☆34Updated 8 years ago
• BrunoMCBraga / Kernel-Whisperer
  ☆29Updated 4 years ago
• changeofpace / x64dbg-Anti-Debug-POC
  viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.
  ☆25Updated 8 years ago
• DeDf / WProtect
  ☆40Updated 6 years ago
• SamLarenN / PSC-Engine
  Polymorphic Stub Creator
  ☆34Updated 8 years ago
• Trietptm-on-Coding-Algorithms / ZeroBank-ring0-bundle
  Kernel-Mode rootkit that connects to a remote server to send & recv commands
  ☆33Updated 7 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆19Updated 9 years ago
• evandowning / windbg-trace
  Use WinDBG to trace the Windows API calls of any Portable Executable file
  ☆32Updated 8 years ago
• guidoreina / http_inspect
  HTTP/HTTPS/DNS inspector (windows driver)
  ☆27Updated 6 years ago
• 0xbadc0de1 / VmP_DBG
  This is a VmProtect integrated debugger, that will essentially allow you to disasm and debug vmp partially virtualized functions at the v…
  ☆47Updated 9 years ago
• 0xcpu / exthost
  A POC for Windows Extension Host hooking
  ☆24Updated 6 years ago
• cxxrev0to1dev / lz77win_sources
  lz77win sources!lz77 is the compression software for the windows platform.
  ☆24Updated 6 years ago
• dro / uac-launchinf-poc
  Windows 10 UAC bypass PoC using LaunchInfSection
  ☆35Updated 7 years ago