ThreadSpy

Introduction

ThreadSpy is hardware assisted thread hijacker, it hijacks all executing thread on-the-fly without hooking any bytes of instruction, you can inject all kind of code or R/W memory in the desired process context for any purpose. You can adjust the frequency and make it randomly hijack threads, regardless of kernel / user mode.

Build Environment

  • Visual Studio 2015 update 3
  • Windows SDK 10
  • Windowr Driver Kit 10

Demostration