Claudio “nex” Guarnieri

http://www.cuckoosandbox.org/

Cuckoo Sandbox is automated malware analysis system. It has API to customize both the processing and the reporting stages. Report contains information about network and filesystem activity, trace of assembler instructions can be obtained.

IDATACO

Documentation

Nektra

http://www.nektra.com/products/deviare-api-hook-windows/

Deviare

Deviare API is a professional API hook engine that was designed to create end user products. Intercepting applications is a complex task which can take place in many different scenarios.

Spy Studio

Windows API Hooking in Python with Deviare

Romain Gaucher (@rgaucher), Haris Andrianakis (@tl0gic)

https://github.com/neuroo/pinpy

PIN

PinPy essentially allows you to to run Python scripts inside whatever programs, just educate it using the XML config file, what you want to hook. You'll need to get some information so that pin can properly install the hooks such as signature, etc. This is done by embedding a Python runtime in a pin tool.

???

???

Core Security Technologies

http://oss.coresecurity.com/projects/uhooker.htm

OllyDBG 1.10

The Universal Hooker is a tool to intercept execution of programs. It enables the user to intercept calls to API calls inside DLLs, and also arbitrary addresses within the executable file in memory.

???

official documentation
usage