Alternatives and similar repositories for 2023iThome

Users that are interested in 2023iThome are comparing it to the libraries listed below

• Cody2333 / SSDT_HOOK

  View on GitHub
  ssdt hook 框架的简单实现
  ☆14Jun 9, 2016Updated 9 years ago
• hongson11698 / defender-database-extract

  View on GitHub
  defender_database
  ☆24Oct 31, 2023Updated 2 years ago
• NoHeart2019 / KasR3Hook

  View on GitHub
  使用 Intel 虚拟化特性实现应用层HOOK
  ☆65Sep 11, 2025Updated 5 months ago
• jamesboltn / R-demo

  View on GitHub
  The Network project is a C++ encapsulation of WinSock2 to form a lightweight network library; The Graphics project is a C++ encapsulation…
  ☆13Oct 31, 2017Updated 8 years ago
• gognl / VMBR

  View on GitHub
  A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data
  ☆28Apr 27, 2024Updated last year
• huoji120 / mash_hypervisor

  View on GitHub
  mash hypervisor host pml4
  ☆17Jun 22, 2022Updated 3 years ago
• Metick / Config

  View on GitHub
  A C++ Config System
  ☆12Dec 15, 2023Updated 2 years ago
• k66inthesky / OinkBL

  View on GitHub
  Oink Bootloader (OinkBL)，系列文[世界第一簡單的UEFI，實作打造自己的開機畫面](https://ithelp.ithome.com.tw/users/20161828/ironman/6446?page=1)
  ☆11Nov 18, 2023Updated 2 years ago
• 781732825 / GsDriver

  View on GitHub
  ☆12Apr 12, 2024Updated last year
• kouzhudong / libnet

  View on GitHub
  windows user mode network library
  ☆12Jan 13, 2026Updated last month
• scc-tw / cg

  View on GitHub
  The commit GPT using OpenAI's chatGPT for free
  ☆12Jan 8, 2026Updated last month
• kouzhudong / InjectDll

  View on GitHub
  Inject dll to process in driver
  ☆10Aug 27, 2024Updated last year
• busy10 / NoScreen

  View on GitHub
  Hiding the window from screenshots using the function win32kfull::ChangeWindowTreeProtection
  ☆11Jan 3, 2022Updated 4 years ago
• IcEy-999 / PDB-Frame

  View on GitHub
  对debughelp的二次开发
  ☆11Feb 20, 2023Updated 2 years ago
• zeze-zeze / 2021iThome

  View on GitHub
  2021 iThome 鐵人賽
  ☆52Oct 13, 2025Updated 4 months ago
• zeze-zeze / HITCON-2023-Demo-CVE-2023-20562

  View on GitHub
  ☆61Aug 21, 2023Updated 2 years ago
• Dabudabot / injection-monitor

  View on GitHub
  Kernel based monitor to check if specified process loads libraries only from allowed directories
  ☆12May 21, 2020Updated 5 years ago
• sreeharshabandi / Captain

  View on GitHub
  Process Creation, Image Load and Thread Creation Notification
  ☆13Sep 15, 2023Updated 2 years ago
• Jasper1467 / mhde

  View on GitHub
  A modern C++ port of the HDE (Hacker Disassembler Engine).
  ☆19Nov 22, 2025Updated 2 months ago
• user23333 / veh

  View on GitHub
  VEH debug plugin
  ☆13Apr 28, 2022Updated 3 years ago
• cxz456999 / Win32ApiHookDetector

  View on GitHub
  Win32 API Hook偵測
  ☆10Oct 1, 2017Updated 8 years ago
• pia-foss / desktop-windows-wfp-callout

  View on GitHub
  ☆16Oct 7, 2020Updated 5 years ago
• danielkrupinski / KernelPID

  View on GitHub
  Example Windows Kernel-mode Driver which finds process ID by executable file name.
  ☆18Nov 23, 2019Updated 6 years ago
• fIappy / InfinityHook

  View on GitHub
  Hook system calls, context switches, page faults and more.
  ☆34Jul 25, 2019Updated 6 years ago
• Jyang772 / HideProcessHookMDL

  View on GitHub
  A simple rootkit to hide a process
  ☆47Jan 10, 2014Updated 12 years ago
• zeze-zeze / NamedPipeMaster

  View on GitHub
  a tool used to analyze and monitor in named pipes
  ☆193Oct 27, 2024Updated last year
• 0xFay / python_RPC_Fuzzer

  View on GitHub
  ☆15Jul 22, 2022Updated 3 years ago
• lxt1045 / FileLogger

  View on GitHub
  ☆12Dec 15, 2016Updated 9 years ago
• beched / ctf

  View on GitHub
  ☆14Jul 9, 2018Updated 7 years ago
• singlefreshBird / Rootkit

  View on GitHub
  Rookit and anti rookit on Windows platform
  ☆14Apr 30, 2024Updated last year
• uf0o / Counterfeit_Object_Oriented_Programming_COOP

  View on GitHub
  ☆16Oct 15, 2024Updated last year
• he4rtbleed / PPLL

  View on GitHub
  Protected Process Light Library
  ☆18Jun 20, 2020Updated 5 years ago
• tahadraidia / rp4windbg

  View on GitHub
  Windbg extension port for rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.
  ☆13Sep 8, 2023Updated 2 years ago
• dyhkwong / SocksRedirector

  View on GitHub
  wfp2socks
  ☆11Sep 11, 2025Updated 5 months ago
• Flerov / EAKC-EnumAllKernelCallbacks

  View on GitHub
  Enumerate Callbacks and all Object Types
  ☆16Jan 9, 2023Updated 3 years ago
• exploits-forsale / prefetch-tool

  View on GitHub
  Windows KASLR bypass using prefetch side-channel
  ☆176Apr 26, 2024Updated last year
• carg-os / karg

  View on GitHub
  A POSIX RISC-V OS kernel written in C23, featuring preemptive priority scheduling, virtual memory, tiered allocators, time management, mo…
  ☆43Feb 4, 2025Updated last year
• zeze-zeze / ioctlance

  View on GitHub
  A tool that is used to hunt vulnerabilities in x64 WDM drivers
  ☆435Dec 7, 2025Updated 2 months ago
• SamLarenN / Kernel-Hijack

  View on GitHub
  ☆14Apr 7, 2018Updated 7 years ago