Hecate

Cross-platform process manipulation framework

Take Control.

---

Overview • Community • Features • Roadmap • Research • License

---

Overview

Hecate is a cross-platform process manipulation framework for personal research.

It provides abstractions for:

• Remote memory interaction
• Injection techniques
• Pattern scanning
• Hooking mechanisms
• Windows / POSIX backend separation

---

Community

Hecate is a personal project - Though I'd appreciate any contributions and feedback.

• Discord: @kauht or @yuhbayn
• Discord Server: https://discord.gg/WVMHUgrgeH
• GitHub: https://github.com/kauht/Hecate

---

Features

Memory

• Typed read/write utilities
• Raw region access
• Pointer chain resolution
• String extraction
• Module enumeration

Scanner

• AOB pattern scanning
• Wildcard signatures
• Section-aware scanning
• ASLR-safe resolution

Injection

• Remote allocation utilities
• Shellcode execution
• LoadLibrary injection (Windows)
• dlopen injection (Linux)
• Manual mapping loader

Hooking

• Inline trampolines
• VTable swapping
• IAT patching
• Disassembler integration (Capstone / Zydis)

---

Roadmap

Foundation

• Windows / Linux backend abstraction
• Static + shared builds (.lib/.a/.dll/.so)
• Optional header-only distribution
• Public API documentation
• Stable error handling model

Memory Layer

• Safe typed read/write
• Region querying
• Pointer chain utilities

Scanner

• Wildcard AOB scanning
• Efficient region scanning
• Module-relative resolution

Injection

• LoadLibrary injection
• dlopen injection
• Reflective/manual mapping

Hooking

• Inline trampolines
• Disassembly-assisted relocation
• VTable swapping

Advanced

• Unified internal/external API
• Optional kernel backend
• Extended research documentation

---

Research

See RESEARCH.md for a structured learning roadmap for each subsystem, feel free to check it out and learn along with me!

---

License

Hecate is licensed under the MIT License.

See the LICENSE file for full terms.