2 个仓库
Awesome GitHub RepositoriesDetour-Based Interceptions
Replaces the first few instructions of a target function with a jump to a user-supplied detour function.
Distinct from Dynamic Function Interception: Distinct from Dynamic Function Interception: uses a specific detour technique that preserves original bytes for trampoline calls.
Explore 2 awesome GitHub repositories matching software engineering & architecture · Detour-Based Interceptions. Refine with filters or upvote what's useful.
Awesome Detour-Based Interceptions GitHub Repositories
用 AI 发现最棒的仓库。我们将通过 AI 为您搜索最匹配的仓库。
- microsoft/detours
microsoft/Detours
6,303在 GitHub 上查看Detours is a library for intercepting Win32 API calls and redirecting function calls at runtime on Windows, enabling binary-level instrumentation without requiring access to the original source code. It functions as an API hooking library and binary instrumentation toolkit, allowing developers to monitor or modify the behavior of compiled Windows binaries by hooking into their function execution paths. The project achieves this through detour-based function interception, where the first few instructions of a target function are replaced with a jump to a user-supplied detour function, while pr
Replaces function entry instructions with jumps to detour functions, preserving original bytes for trampoline calls.
C++hacktoberfestmicrosoft - x64dbg/scyllahide
x64dbg/ScyllaHide
4,167在 GitHub 上查看ScyllaHide 是一款反调试器绕过插件和逆向工程工具，旨在向目标应用隐藏调试器。它作为一个用户模式 API 钩子库和 DLL 注入框架，防止程序在被分析时检测并关闭自身。 该项目通过中和安全防御，实现了恶意软件分析和受保护软件的研究。它通过拦截和修改系统库响应，欺骗应用使其无法识别其执行环境。 该工具采用多种技术方法来保持隐蔽性，包括内联 API 钩子、系统调用代理和进程环境块 (PEB) 修补。它还处理用户模式陷阱，并利用动态库重定向来过滤敏感的 API 响应。
Uses detour-based inline API hooking to intercept and modify system calls.
C++
