Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
☆171Aug 23, 2024Updated last year
Alternatives and similar repositories for IDA_PHNT_TYPES
Users that are interested in IDA_PHNT_TYPES are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆17Apr 21, 2026Updated 3 months ago
- Single header version of System Informer's phnt library.☆251Mar 27, 2026Updated 4 months ago
- Native code virtualizer for x64 binaries☆535Dec 20, 2024Updated last year
- Inlay hints for hex-rays☆82Apr 3, 2026Updated 4 months ago
- Hooking Windows' exception dispatcher to protect process's PML4☆267Jan 24, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- IDA/Binary Ninja Plugin to automatically identify and set enums for standard functions☆501Oct 11, 2025Updated 10 months ago
- A basic implementation of Patch Guard that I implemented, that includes integrity checks and other protection mechanisms I added.☆78Mar 29, 2025Updated last year
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.☆371Feb 9, 2025Updated last year
- Bindings for Microsoft WinDBG TTD☆243Aug 5, 2023Updated 3 years ago
- Python bindings for the Icicle emulator.☆43Nov 6, 2025Updated 9 months ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆98Oct 26, 2025Updated 9 months ago
- Efficient general mixed boolean-arithmetic (MBA) simplifier☆136Jul 25, 2026Updated 2 weeks ago
- Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!☆451Apr 19, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This IDA plugin extends the functionality of the assembly and hex view. With this plugin, you can conveniently decode/decrypt/alter data …☆86May 31, 2025Updated last year
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated 2 years ago
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆269Aug 31, 2022Updated 3 years ago
- DelphiHelper is a python IDA Pro plugin aiming to help the analysis of x86/x86_64 binaries written in Delphi programming language.☆166Apr 29, 2026Updated 3 months ago
- Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com☆414Jun 5, 2026Updated 2 months ago
- IDA Pro plugin to make bitfield accesses easier to grep☆257Aug 3, 2025Updated last year
- ☆29Jan 17, 2026Updated 6 months ago
- Yet another LLVM-based obfuscator☆127Sep 3, 2024Updated last year
- Documentation of Microsoft's Warbird obfuscation☆71Aug 29, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API☆672Jan 23, 2025Updated last year
- A x86_64 software emulator☆163Aug 25, 2025Updated 11 months ago
- Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks☆437Jul 10, 2026Updated last month
- Generate a PDB file given the old PDB file and an address mapping☆55Aug 3, 2025Updated last year
- An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…☆877Feb 2, 2024Updated 2 years ago
- Binary lifter and deobfuscator using remill for x86_64 Windows binaries☆90Apr 20, 2026Updated 3 months ago
- Rewrite and obfuscate code in compiled binaries☆277Dec 13, 2025Updated 8 months ago
- Exploit targeting NT kernel in 24H2 Windows Insider Preview☆154Apr 26, 2024Updated 2 years ago
- Deobfuscation via optimization with usage of LLVM IR and parsing assembly.☆881May 8, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Sysmon-Like research tool for ETW☆397Nov 15, 2022Updated 3 years ago
- Titan is a VMProtect devirtualizer☆150Mar 6, 2024Updated 2 years ago
- ☆23Jan 15, 2025Updated last year
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆677Jan 28, 2025Updated last year
- Time Travel Debugging IDA plugin☆598Jun 27, 2024Updated 2 years ago
- An x86-64 Code Virtualizer☆326Sep 26, 2024Updated last year
- a IDA plugin helps you to manage your IDA Comments☆26Sep 30, 2024Updated last year