Skip to content

qHooK is very simple python script (dependent on pydbg) which hooks user defined Win32 APIs in any process and monitor then while process is running and at last prepare a CSV report with various interesting information which can help reverse engineer to track down / analyse unknown exploit samples / shellcode.

Notifications You must be signed in to change notification settings

debasishm89/qHooK

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 

Repository files navigation

qHooK

qHooK is very simple and straight forward python script (dependent on pydbg) which hooks user defined Win32 APIs in any process and monitor then while process is running and at last prepare a CSV report with various interesting information which can help reverse engineer to track down / analyse unknown exploit samples / shellcode.

Out Put of qHooK

This is how the final CSV looks(Obviously after little bit excel formatting). alt text

Video Demo of qHooK(with Voice)

Sorry about my weak voice. My laptop mic sucks :(

IMAGE ALT TEXT HERE

About

qHooK is very simple python script (dependent on pydbg) which hooks user defined Win32 APIs in any process and monitor then while process is running and at last prepare a CSV report with various interesting information which can help reverse engineer to track down / analyse unknown exploit samples / shellcode.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages