explife0011 Goto Github PK

highcall-library

usermode standalone kernel interface

hijacken

Use it for analysis and attack windows application using dll hijacking vulnerabilities

hikari

LLVM Obfuscator

hip

HIP : Convert CUDA to Portable C++ Code

hips-hids_cvemod

CVE主防(HIPS/HIDS)

hips-light

一个简单的用于win7 x64的驱动级HIPS

hithithit

This is hyper-v netvsc fuzzer.

hkkerneldbg

F**k ssdt hook in np, tp, hs

hkteam_obfuscator

String Obfuscator from HackingTeam

hleaker

An usermode alternative for DuplicateHandle.

hlslexplorer

See how hardware understands your HLSL

holicpoc

POC

hollowfind

Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis techniques. The plugin detects such attacks by finding discrepancy in the VAD and PEB, it also disassembles the address of entry point to detect any redirection attempts and also reports any suspicious memory regions which should help in detecting any injected code.

hollows_hunter

Scans all running processes. Recognizes and dumps variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

hook.lib

easy detour-, vftable-, iat- and eathooking

hookapi

Handy way to hook x86 or x64 API

hooker

Minimalistic hooking library written in C

hooker-1

🔥🔥hooker是一个基于frida实现的逆向工具包。为逆向开发人员提供统一化的脚本包管理方式、通杀脚本、自动化生成hook脚本、内存漫游探测activity和service、firda版JustTrustMe

hookiat

hooking-via-instrumentationcallback

codes for my blog post: https://secrary.com/Random/InstrumentationCallback/

hookkifastcallentry

Hook KiFastCallEntry

hooklib

hooklib-1

hooklib is a library that is used to inject DLL libraries in the processes, the interception code and the implementation of IPC.

hooklib-2

inlinehook lib for x86/64 Edit

hookmsrbysvm

hook msr by amd svm

hookndis

a network filter using NDIS hook technique

hookqq

Hook sendto to get the target IP address

hooks

A DLL that performs IAT hooking

hookstacktracer

Stack tracer for hooked functions calls. Logging and analysys.

hostingclr

Executing a .NET Assembly from C++ in Memory (CLR Hosting)