Alternatives and similar repositories for win32-appcontainer-tools

Users that are interested in win32-appcontainer-tools are comparing it to the libraries listed below

• ch3rn0byl / Gremlins
  ☆14Updated 2 years ago
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆77Updated last year
• jonny-jhnson / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆42Updated last year
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆16Updated last year
• nmantani / PS-MOTW
  PS-MOTW: PowerShell scripts to set / show / remove MOTW (Mark of the Web)
  ☆52Updated 2 years ago
• jborean93 / PSDetour-Hooks
  Auditing Hooks for https://github.com/jborean93/PSDetour
  ☆13Updated 8 months ago
• connormcgarr / SkBridge
  Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1
  ☆68Updated 4 months ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆80Updated 6 months ago
• zodiacon / WMIExplorer
  ☆26Updated 6 months ago
• zodiacon / TaskSched
  ☆29Updated 3 years ago
• trailofbits / WinDbg-JS
  ☆27Updated 2 years ago
• Devolutions / pwsh-host-rs
  Rust PowerShell Hosting Library
  ☆16Updated 2 months ago
• AaLl86 / WindowsInternals
  Contains all the applications developed for the Second part of the 7th Edition of Windows Internals book
  ☆115Updated last year
• ZPetricusic / defender_signature_parser
  Short Python script for parsing Defender VDM signature files.
  ☆10Updated last year
• VergiliusProject / kernels-data
  Windows kernel PDB data parsed into YAML
  ☆42Updated 2 months ago
• jborean93 / PSDetour
  Windows Detour Hooking in PowerShell
  ☆82Updated 3 weeks ago
• qtc-de / rpv-web
  rpv-web is a browser based frontend for the rpv library
  ☆26Updated last month
• namazso / dll-universal-patcher
  A universal binary patching dll.
  ☆114Updated last year
• benheise / ANGRYORCHARD
  A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.
  ☆34Updated 3 years ago
• 3dnow / NtCreateLowBoxToken
  A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering
  ☆41Updated 7 months ago
• Wack0 / SecureBootPolicyTools
  Take back control of Windows Code Integrity, no exploits or patching required! Requires that you control your own Platform Key (PK).
  ☆49Updated 3 years ago
• TimMisiak / windup
  WinDbg installer/updater
  ☆42Updated 2 years ago
• rbmm / TPM
  Easy encrypt/decrypt data with TPM
  ☆25Updated last year
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆53Updated last year
• yo-yo-yo-jbo / virtual_memory_known_dlls
  ☆21Updated 2 years ago
• 0mWindyBug / RansomGuard
  anti-ransomware file-system filter
  ☆68Updated last year
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆38Updated 2 years ago
• jonaslyk / temp
  ☆72Updated 2 years ago
• jborean93 / LocalKdc
  Info on how to use Kerberos KDC on a non-domain joined host
  ☆50Updated last year
• zodiacon / TraceConnections
  Simple example for getting started with eBPF for Windows
  ☆49Updated 10 months ago