Detect-Hooks
Hook detector
A tool that attempts to detect userland API hooks in place by AV/EDR
Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR
148 stars
4 watching
30 forks
Language: C
last commit: about 5 years agoRelated projects:
| Repository | Description | Stars |
|---|---|---|
 xforcered/detect-hooks | A tool that detects userland API hooks installed by Anti-Virus/EDR software to prevent post-exploitation actions. | 97 |
 3lp4tr0n/beaconhunter | A tool for detecting and responding to potential Cobalt Strike beacons using Extended Trace Record (ETW) tracing | 482 |
 ccob/beaconeye | A tool designed to detect and monitor malicious beacon activity from CobaltStrike, providing insights into operator command output. | 892 |
 totpero/devicedetector.net | A C# library for detecting devices and clients from User Agent strings | 355 |
 jingzhang617/cod-rank-localize-and-segment | Develops a system to detect, segment, and rank camouflaged objects in images. | 74 |
 agkozak/zhooks | A tool to inspect and report on Zsh hook functions and arrays | 55 |
 rsmudge/unhook-bof | Tool to remove API hooks from a Beacon process. | 263 |
 yulingtianxia/blockhook | A tool that intercepts and modifies Objective-C blocks at runtime. | 845 |
 bojan/thingy | A modern device detection and querying library for Swift | 60 |
 crypt0p3g/bof-collection | A collection of beacon object files designed to be used in a remote access tool like Cobalt Strike. | 170 |
 vadymmarkov/beethoven | A Swift library providing an interface to pitch detection in audio signals. | 828 |
 cobalt-strike/unhook-bof | Removes API hooks from a malicious process | 54 |
 jvbalen/catchy | Tools for analyzing popular music to identify catchy hooks | 21 |
 aress31/flarequench | A Burp Suite plugin that adds checks to reveal Cloudflare-protected web application origins | 61 |
 gosecure/malware-ioc | Provides a set of standardized indicators to help detect and assess malware presence | 10 |