HoShiMin / formatPE
A bunch of parsers for PE and PDB formats in C++
☆230Updated 8 months ago
Alternatives and similar repositories for formatPE:
Users that are interested in formatPE are comparing it to the libraries listed below
- The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.☆402Updated 6 months ago
- A modern c++ implementation of windows heavens gate☆202Updated 4 years ago
- Collection of undocumented Windows API declarations.☆300Updated last week
- C++ STL in the Windows Kernel with C++ Exception Support☆401Updated last year
- COFF and Portable Executable format described using standard C++ with no dependencies.☆267Updated 2 weeks ago
- The Win32 Anti-Intrusion Library☆205Updated 5 years ago
- C++17 PE manualmapper☆304Updated 3 years ago
- Vectored Exception Handling Hooking Class☆146Updated 6 years ago
- C++ Exceptions in Windows Drivers☆203Updated 4 years ago
- C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL☆185Updated 2 years ago
- Use ci.dll API for validating Authenticode signature of files☆136Updated 2 years ago
- The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).☆239Updated 9 months ago
- Windows inline hooking tool.☆240Updated 6 years ago
- The program draws with win32k gdi functions in the kernel while NtGdiDdDDISubmitCommand is being hooked.☆272Updated 4 years ago
- System call hook for Windows 10 20H1☆485Updated 3 years ago
- MemoryModule which compatible with Win32 API and support exception handling☆379Updated 2 months ago
- Windows Kernel Driver with C++ runtime☆169Updated 4 years ago
- A wrapper library around native windows sytem APIs☆418Updated 3 years ago
- Obfuscates all RTTI (Run-time type information) inside a binary☆191Updated 7 years ago
- Detours with just single dependency - NTDLL☆617Updated 2 years ago
- modify from memorymodule. support exception☆214Updated 4 years ago
- ☆65Updated 11 years ago
- This program remaps its image to prevent the page protection of pages contained in the image from being modified via NtProtectVirtualMemo…☆580Updated 5 years ago
- Library for parsing internal structures of PE32/PE32+ binary files.☆162Updated last month
- Kernel LdrLoadDll injector☆258Updated 6 years ago
- Advanced x86/x86-64 hooking library (WIP).☆126Updated last year
- x86 Binary Code Virtualization Tool☆211Updated 4 years ago
- Kernel-Mode extended version of https://github.com/microsoft/Detours☆152Updated 2 years ago
- x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration☆252Updated 2 years ago
- Analyze patches in a process