PrototypeCommon
hwbp/CLR-Unhook
Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan in-memory .NET assembly loads. This tool unhooks that function.
- Owner
- hwbp (personal account)
- Stars
- Stars: 214
- Forks
- Forks: 21
- Language
- C++
- License
- None
- Created
- 2025
- Tier
- Prototype (100 to 249 ★) What this tier means
More repos by hwbp
All 2 repos by hwbp- hwbp/LazyHookStars: 149C++Prototype
Nearby in C++
All C++ repos- mojtabafalleh/emudbgStars: 214C++Prototype
- andreisss/Remote-DLL-Injection-with-Timer-based-Shellcode-ExecutionStars: 214C++Prototype
- FinalScave/SweetEditorStars: 214C++Prototype
- wang-bin/qdevicewatcherStars: 214C++Prototype
- dubey/weaverStars: 214C++Prototype
- CroatiaControlLtd/asterixStars: 214C++Prototype