Alternatives and similar repositories for ExpDiff

Users that are interested in ExpDiff are comparing it to the libraries listed below

• russellklenk / ETW
  Event Tracing for Windows Custom Events
  ☆21Updated 10 years ago
• zodiacon / ObjectBrowser
  An alternative tool to Sysinternals WinObj tool (nicer icons!)
  ☆37Updated 7 years ago
• WalkingCat / SymDiff
  Diff tool for comparing symbols in PDB files
  ☆84Updated 5 years ago
• AzureGreen / WinNT-Learning
  Notes my learning steps about Windows-NT
  ☆23Updated 8 years ago
• zodiacon / RegistryExplorer
  ☆21Updated 8 years ago
• ww898 / in_proc_etw
  The internal Windows structures hack to create the in-process private ETW session
  ☆13Updated 8 years ago
• jpassing / ntrace
  NTrace -- a function boundary tracing tool for Windows user and kernel mode
  ☆22Updated 12 years ago
• apriorit / antirootkit-anti-splicer
  The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers
  ☆35Updated 8 years ago
• Sha0 / winkexec
  Windows KExec
  ☆25Updated 15 years ago
• NtQuery / ScyllaPlugins
  Plugins for Scylla
  ☆20Updated 14 years ago
• OSRDrivers / deleteex
  Demonstrate the new FileDispositionInfoEx behavior
  ☆14Updated 8 years ago
• DeDf / HyperVisor
  ☆15Updated 9 years ago
• gerhart01 / HyperV-sockets
  Hyper-V sockets
  ☆29Updated 8 years ago
• tandasat / hyperplatform_log_parser
  User-mode program parsing logs created by HyperPlatform
  ☆18Updated 9 years ago
• ajkhoury / Dude-Loader
  Class implementation of PowerLoader injection technique
  ☆32Updated 9 years ago
• mq1n / ForceThreadSuspend
  Windows hidden thread suspend POC with code injection
  ☆12Updated 8 years ago
• emc2314 / PEZEncrypt
  PE Infector/Cryptor source code
  ☆16Updated 8 years ago
• Mattiwatti / WinMain-is-usually-a-function
  Windows NT port of 'Main is usually a function. So then when is it not?'
  ☆27Updated last year
• microsoft / FirewallEventMonitor
  Listens for Firewall rule match events generated by Microsoft Hyper-V Virtual Filter Protocol (VFP) extension.
  ☆31Updated 4 years ago
• zodiacon / ObjDir
  Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.
  ☆21Updated 2 years ago
• swwwolf / cbtest
  Windows kernel-mode callbacks tutorial driver
  ☆47Updated 9 years ago
• zodiacon / PEParser
  Portable Executable parsing library, used by PEExplorer. Also available as a nuget package
  ☆36Updated 7 years ago
• AaLl86 / retroware
  This repository contains some tools that I have written in the past
  ☆28Updated 2 years ago
• ThunderCls / xLCB
  xLCB plugin for x64dbg
  ☆20Updated 9 years ago
• eyalfishler / CrystalCPUID
  use crystalCPUID to identify vt-x & amd-v
  ☆17Updated 10 years ago
• zodiacon / ManagedWindows
  Managed wrappers around the Windows API and some Native API
  ☆35Updated 7 years ago
• changeofpace / Remote-Process-Cookie-for-Windows-7
  Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.
  ☆22Updated 8 years ago
• rsa9000 / regfanalysistools
  Low-level MS Windows registry files analysis tools
  ☆20Updated 9 years ago
• EvilKnight1986 / Simrep
  windows kernel File redirection
  ☆20Updated 11 years ago
• therealdreg / auxlib
  Full reversing of the Microsoft Auxiliary Windows API Library and ported to C
  ☆24Updated last year