hooking

hasherezade/pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

dweinstein/awesome-frida

Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

ThirteenAG/WidescreenFixesPack

Plugins to make or improve widescreen resolutions support in games, add more features and fix bugs.

iddoeldor/frida-snippets

Hand-crafted Frida examples

bytedance/bhook

:fire: ByteHook is an Android PLT hook library which supports armeabi-v7a, arm64-v8a, x86 and x86_64.

canyie/pine

Dynamic java method hook framework on ART. Allowing you to change almost all java methods' behavior dynamically.

wbenny/injdrv

proof-of-concept Windows Driver for injecting DLL into user-mode processes using APC

FrenchYeti/dexcalibur

[Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.

noobpk/frida-ios-hook

A tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform

kubo/plthook

Hook function calls by replacing PLT(Procedure Linkage Table) entries.

HoShiMin/HookLib

The functions interception library written on pure C and NativeAPI with UserMode and KernelMode support

kubo/funchook

Hook function calls by inserting jump instructions at runtime

wbenny/DetoursNT

Detours with just single dependency - NTDLL

cursey/safetyhook

C++23 procedure hooking library.

noobpk/frida-android-hook

A tool that helps you work with frida easily for Android platform

mar-v-in/ArtHook

Library for hooking on ART

chztbby/RebirthGuard

Anti-cheat library for Windows C++

talsec/Free-RASP-Community

SDK providing app protection and threat monitoring for mobile devices. Works with Flutter, React Native, Android and iOS. Shield your app with free RASP. Detect reverse engineering, root (Magisk), jailbreak, Frida, emulators, bots, tampering and integrity issues, obfuscation, VPN usage, malware, and monitor device identification and fingerprint.

fkie-cad/friTap

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

milabs/khook

Linux Kernel hooking engine (x86)

FrenchYeti/interruptor

Human-friendly cross-platform system call tracing and hooking library based on Frida's Stalker

alphaSeclab/hooking

Resources About Hooking. For All Platforms. Currently 300+ Tools And 600+ Posts.

Air14/airhv

Simple Intel VT-x hypervisor

hugsy/CFB

CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.

zeroperil/HookDump

Security product hook detection

khalladay/hooking-by-example

A series of increasingly complex programs demonstrating function hooking on 64 bit Windows. Culminating in a program that hooks mspaint to make it always paint orange.

gellin/TeamViewer_Permissions_Hook_V1

A proof of concept injectable C++ dll, that uses naked inline hooking and direct memory modification to change your TeamViewer permissions.

therealdreg/DbgChild

Debug Child Process Tool (auto attach)

therealdreg/anticuckoo

A tool to detect and crash Cuckoo Sandbox

ryan-weil/HideProcessHook

DLL that hooks the NtQuerySystemInformation API and hides a process name

unknownv2/CoreHook

A library that simplifies intercepting application function calls using managed code and the .NET Core runtime

gdabah/distormx

The ultimate hooking library

AgoraIO/Advanced-Video

hasherezade/IAT_patcher

Persistent IAT hooking application - based on bearparser

bruhmoment21/UniversalHookX

Universal graphical hook for Windows apps.