2 Repos
Replaces the first few instructions of a target function with a jump to a user-supplied detour function.
Distinct from Dynamic Function Interception: Distinct from Dynamic Function Interception: uses a specific detour technique that preserves original bytes for trampoline calls.
Explore 2 awesome GitHub repositories matching software engineering & architecture · Detour-Based Interceptions. Refine with filters or upvote what's useful.
Detours is a library for intercepting Win32 API calls and redirecting function calls at runtime on Windows, enabling binary-level instrumentation without requiring access to the original source code. It functions as an API hooking library and binary instrumentation toolkit, allowing developers to monitor or modify the behavior of compiled Windows binaries by hooking into their function execution paths. The project achieves this through detour-based function interception, where the first few instructions of a target function are replaced with a jump to a user-supplied detour function, while pr
Replaces function entry instructions with jumps to detour functions, preserving original bytes for trampoline calls.
ScyllaHide is an anti-debugger bypass plugin and reverse engineering tool designed to hide a debugger from a target application. It functions as a user-mode API hooking library and DLL injection framework that prevents programs from detecting and closing themselves when being analyzed. The project enables malware analysis and the study of protected software by neutralizing security defenses. It achieves this by intercepting and modifying system library responses to deceive applications about their execution environment. The utility employs several technical methods to maintain stealth, inclu
Uses detour-based inline API hooking to intercept and modify system calls.