KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #typescript #dsh #dsh-plugin #ai-agent #codex #ai-agents #deepseek-harness #claude-code #cli #react #mcp

LightHook

★ 400 Open GitHub ↗

Single-header, minimalistic, cross-platform hook library written in pure C

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

![logo](https://raw.githubusercontent.com/SamuelTulach/LightHook/main/Assets/logo_small.png)

Single-header, minimalistic, cross-platform hook library written in pure C for x86-64 based systems.

## But... why?
While other well-written libraries that do exactly the same already exist, I wanted to have something simple that would not use an entire disassembler engine which can sometimes be painful to include in a project.

**Pros of this library:**
- Written in pure C
- No dependencies (no full disassembler engine)
- Single header
- Works in both kernelmode/usermode
- Cross-platform (Windows/Linux/EFI)
- Easily portable (3 functions to allocate/free/protect memory that are platform specific)

**Cons of this library:**
- Breaks when a function starts with unsupported instructions (ex. AVX)
- Breaks when a function starts with instructions accessing memory using relative addressing (call/jmp/cmp)

## Showcase
![linux](https://raw.githubusercontent.com/SamuelTulach/LightHook/main/Assets/linux_usermode.png)
![wink](https://raw.githubusercontent.com/SamuelTulach/LightHook/main/Assets/windows_kernelmode.png)
![winu](https://raw.githubusercontent.com/SamuelTulach/LightHook/main/Assets/windows_usermode.png)
![efi](https://raw.githubusercontent.com/SamuelTulach/LightHook/main/Assets/efi_application.png)

## Usage
Include the [header file](https://github.com/SamuelTulach/LightHook/blob/main/Source/LightHook.h) in your project. Initialise hook structure by calling `CreateHook`. Perform the actual hook by calling `EnableHook` and optionally revert the hook with a call to `DisableHook`.

```
HookInformation info = CreateHook((void*)&FunctionToHook, (void*)&FunctionToCall);
int status = EnableHook(&info);
if (!status)
    return;

// Call the original function with info.Trampoline
FunctionToHook(10, 20);

DisableHook(&info)
```

## License
This repository is licensed under MIT if not stated otherwise in subfolders.

LightHook

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README