It provides essential functionalities such as issuing hypercalls, managing function hooks and detours, setting up resident memory pages, and enabling custom signal and exception handlers. Currently, it supports userspace targets on both Linux and Windows.

Features

Function detours by address or name
Module and function resolving
Signal and exception handling
Nyx guest-to-host communication via hypercalls
Config file for PT trace modules
Malloc resident pages for fuzz input
Debug logging to host via hypercalls

Resources

Getting Started

We provide examples for both Windows and Linux.

There is also a selffuzz example for testing purposes.

For a detailed setup instructions check out our blog post.

Known Issues

When building HyperHook for Windows targets in release mode, the hooking seems to be unstable.