GitHub repository: sec-js/HookFinder
Description: Simple PoC to locate hooked functions in ntdll.dll