{"id":23682432,"url":"https://github.com/renarddev/hijack","last_synced_at":"2026-01-16T07:30:52.906Z","repository":{"id":269434370,"uuid":"907386712","full_name":"RenardDev/HiJack","owner":"RenardDev","description":"A utility leveraging Windows 10+ mechanisms to intercept process creation by registering a debugger in the system registry.","archived":false,"fork":false,"pushed_at":"2026-01-13T17:58:08.000Z","size":1188,"stargazers_count":3,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2026-01-13T19:22:00.462Z","etag":null,"topics":["hijack","hijacking","hijacking-methods","injector","injector-x64"],"latest_commit_sha":null,"homepage":"","language":"C++","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RenardDev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-12-23T13:14:59.000Z","updated_at":"2026-01-13T17:58:11.000Z","dependencies_parsed_at":"2024-12-23T15:19:09.221Z","dependency_job_id":"d1d6d0ea-84bc-4fd8-8da9-58bdc6173d85","html_url":"https://github.com/RenardDev/HiJack","commit_stats":null,"previous_names":["renarddev/hijack"],"tags_count":15,"template":false,"template_full_name":null,"purl":"pkg:github/RenardDev/HiJack","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RenardDev%2FHiJack","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RenardDev%2FHiJack/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RenardDev%2FHiJack/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RenardDev%2FHiJack/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RenardDev","download_url":"https://codeload.github.com/RenardDev/HiJack/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RenardDev%2FHiJack/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28478047,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T06:30:42.265Z","status":"ssl_error","status_checked_at":"2026-01-16T06:30:16.248Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hijack","hijacking","hijacking-methods","injector","injector-x64"],"created_at":"2024-12-29T19:11:45.034Z","updated_at":"2026-01-16T07:30:52.898Z","avatar_url":"https://github.com/RenardDev.png","language":"C++","funding_links":[],"categories":[],"sub_categories":[],"readme":"# HiJack\nA utility leveraging Windows 10+ mechanisms to intercept process creation by registering a debugger in the system registry.\n\n# Commands\n```\nHiJack.exe /list\nHiJack.exe /add \u003cFile Name\u003e [Flags]\nHiJack.exe /remove \u003cFile Name\u003e [Flags]\n```\n\n### Flags\n```\n0x1 - Unload the library immediately after calling DllMain.\n0x2 - Enable LDR linking.\n```\n\n# Usage\nTo intercept a process, such as hello.exe, execute the following command:\n```\nHiJack.exe /add hello.exe\n```\nThis will enable HiJack to intercept the process creation of `hello.exe` and inject the library `\u003cFile Name\u003e_hijack.dll` (e.g., `hello_hijack.dll` or `hello_hijack32.dll` if the process is 32-bit). The DLL file must be located in the same directory as the intercepted executable file, but it is also acceptable for the DLL to be located in the same directory as HiJack.\n\n# NOTE\n* Ensure that you use the appropriate version of HiJack:\n  - Use the 32-bit version for 32-bit processes.\n  - Use the 64-bit version for 64-bit processes.\n* The 32-bit version of HiJack can utilize the 64-bit version if both executables are placed in the same directory.\n* The 64-bit version of HiJack can utilize the 32-bit version if both executables are placed in the same directory.\n* The NTDLL project is a DLL that can be used as an example for injection.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frenarddev%2Fhijack","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frenarddev%2Fhijack","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frenarddev%2Fhijack/lists"}