Alternatives and similar repositories for afd

Users that are interested in afd are comparing it to the libraries listed below

• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆17Updated 3 years ago
• avalon1610 / ALPC
  Advance LPC
  ☆69Updated 8 years ago
• CZashi / win-reverse
  ntos shit
  ☆26Updated last year
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆54Updated 3 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆101Updated 6 months ago
• shareef12 / libpdb
  Parser for Microsoft Program Database (PDB) files
  ☆76Updated 5 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆68Updated 5 years ago
• hrbust86 / SvmNest
  a frame of amd-v svm nest
  ☆53Updated 5 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆67Updated last year
• 0x25bit / Labs
  ☆38Updated 6 years ago
• KelvinMsft / UsbMon
  ☆36Updated 4 years ago
• mbikovitsky / WingDbg
  Friends don't let friends debug alone
  ☆41Updated 9 years ago
• idkwim / frookSINATRA
  POC of sysenter x64 LSTAR MSR hook
  ☆40Updated 11 years ago
• chuangshizhiqiang / WindowsComponentsSUM
  A collection of Windows Components(Mostly is ntoskrnl.exe)
  ☆29Updated 4 years ago
• 9176324 / Daat
  a simple intel vt code both support x86 & x64. PatchGuard monitor.
  ☆76Updated 3 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 4 years ago
• 0ffffffffh / system_call_hook_win10_1903
  This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
  ☆53Updated 5 years ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆144Updated 6 years ago
• 474172261 / windows-CET
  ☆13Updated 2 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 7 years ago
• yjugl / mitimon
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Updated 2 years ago
• jxy-s / vfdynf
  Application Verifier Dynamic Fault Injection
  ☆39Updated 4 months ago
• ranni0225 / WRK
  Windows Research Kernel VS2022 Solution
  ☆34Updated 11 months ago
• therealdreg / ida_bochs_windows
  Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)
  ☆62Updated last year
• anatolymik / machineries
  ☆9Updated 8 years ago
• nmgwddj / A-Protect
  ☆24Updated 7 years ago
• zzhouhe / x96_POC
  A poc of embedding x64 code into x86 PE file
  ☆19Updated 5 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 4 years ago
• Iizerd / BDASM
  Binary DisASseMbler
  ☆24Updated 2 years ago
• stdhu / windows-kernel-pagehook
  windows kernel pagehook
  ☆40Updated 2 years ago