This project supports extending (hooking) unmanaged code (APIs) with pure managed ones, from within a fully managed environment on 32- or 64-bit Windows XP SP2, Windows Vista x64, Windows Server 2008 x64, Windows 7, Windows 8.1, and Windows 10.
EasyHook currently supports injecting assemblies built for .NET Framework 3.5 and 4.0 and can also inject native DLLs.
Install-Package EasyHook -Version 2.7.7097
dotnet add package EasyHook --version 2.7.7097
<PackageReference Include="EasyHook" Version="2.7.7097" />
paket add EasyHook --version 2.7.7097
#r "nuget: EasyHook, 2.7.7097"
// Install EasyHook as a Cake Addin #addin nuget:?package=EasyHook&version=2.7.7097 // Install EasyHook as a Cake Tool #tool nuget:?package=EasyHook&version=2.7.7097
1. Support hooking far jumps even if not first instruction for x64 (#243)
1. x64 trampoline: ensure stack is 16 bytes aligned (#214 and #234)
1. Quoted service path to avoid path spaces vulnerability (outlined in CVE-2005-1185, CVE-2005-2938 and CVE-2000-1128)
2. Rename CLIENT_ID struct to DBG_CLIENT_ID (fix build error on Windows SDK 10.0.16299.0) (#225)
3. NuGet support for VS2017 (v141) native C/C++ package (#181)
1. Allow EasyLoad library path to be specified within Config class - only impacts managed remote hook (#220)
1. CreateAndInject now supports long command lines (#84 / #170)
2. RhCreateRemoveStealthThread now works for 64-bit targets (#91 / #159)
3. Added LhGetHookBypassAddress / LocalHook.HookBypassAddress to allow bypassing the hook and call original directly without having to be within the hook handler (#155)
1. MAX_HOOK_COUNT increased from 128 to 1024
2. CreateAndInject fixed to support injection across sessions (providing appropriate privileges).
3. RhCreateStealthRemoteThread fixed for 32-bit (still fairly experimental) (#91)
4. 64-bit driver now preserves RAX register for trampoline (#78)
1. Added WOW64 boundary executables to NuGet package
This package has no dependencies.
NuGet packages (2)
Showing the top 2 NuGet packages that depend on EasyHook:
A small .NET library to intercept controls on PS4 Remote Play for Windows
GitHub repositories (11)
Showing the top 5 popular GitHub repositories that depend on EasyHook:
Every programmer needs a rubberduck. COM add-in for the VBA & VB6 IDE (VBE).
A Lightweight Windows Taskbar Enhancement Utility
Also known by Microsoft as Knifecoat :hot_pepper:
DirectX Capture and Overlays by using Direct3D API hooks
Automation utility for PS4 Remote Play written in C#