Alternatives and similar repositories for CustomShim:

Users that are interested in CustomShim are comparing it to the libraries listed below

• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 6 years ago
• zodiacon / TaskSched
  ☆27Updated 2 years ago
• zodiacon / InfStudio
  INF Studio for easier working with driver installation files
  ☆36Updated last year
• batteryshark / stfu_wow64
  A Generic WOW64 Process Blocker
  ☆14Updated 3 years ago
• zodiacon / BITSManager
  BITS Transfers Manager
  ☆40Updated 2 years ago
• Harvester57 / CodeIntegrity-DriverBlocklist
  ☆20Updated last month
• OSWatcher / windows-desktop
  History and analysis of Windows desktop images
  ☆17Updated 4 years ago
• dennisbabkin / SigRemover
  Utility to remove digital code signature from binary PE files in Windows.
  ☆16Updated 3 years ago
• lilkui / runasti
  Runs programs as TrustedInstaller
  ☆49Updated 5 years ago
• dr-anoroc / rawccopy
  Command line utility for copying files on NTFS using low level disk access
  ☆34Updated 11 months ago
• gerhart01 / Hyper-V-Tools
  Different tools for Microsoft Hyper-V researching
  ☆48Updated 9 months ago
• lordmulder / rich-header-eraser
  This is a simple tool to remove the "Rich" header from binaries (EXE or DLL files) created by M$ development tools.
  ☆33Updated 4 years ago
• am0nsec / vxlib
  C Header Only Library for Virii
  ☆10Updated 4 years ago
• jborean93 / PSDetour-Hooks
  Auditing Hooks for https://github.com/jborean93/PSDetour
  ☆12Updated 4 months ago
• adoxa / regdump
  Dump Windows registry hives as text.
  ☆16Updated 6 years ago
• hasherezade / libpeconv_and_detours_tpl
  A template for projects using both libPeConv and MS Detours
  ☆13Updated last year
• 3dnow / NtCreateLowBoxToken
  A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering
  ☆33Updated 2 months ago
• zodiacon / DeviceExplorer
  ☆45Updated 3 months ago
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆33Updated 4 years ago
• Mattiwatti / WinMain-is-usually-a-function
  Windows NT port of 'Main is usually a function. So then when is it not?'
  ☆25Updated last year
• VergiliusProject / kernels-data
  Windows kernel PDB data parsed into YAML
  ☆34Updated 4 months ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 10 months ago
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• 0xMegaByte / COM-Explained
  ☆25Updated 2 years ago
• decoder-it / CreateTokenExample
  ☆17Updated 5 years ago
• zodiacon / NativeApps
  Demos and presentation from SECArmy Village Grayhat 2020
  ☆36Updated last year
• hotnops / RemoteDebugView
  A DLL that serves OutputDebugString content over a TCP connection
  ☆35Updated 3 years ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• secana / CertDump
  Dump certificates from PE files in different formats
  ☆38Updated last year
• rbmm / SearchEx
  D00
  ☆6Updated 3 years ago