anhkgg / awesome-windbg-extensions
awesome windbg extensions
☆323Updated 5 years ago
Alternatives and similar repositories for awesome-windbg-extensions:
Users that are interested in awesome-windbg-extensions are comparing it to the libraries listed below
- My personal cheat sheet for using WinDbg for kernel debugging☆405Updated 4 months ago
- A bunch of JavaScript extensions for WinDbg.☆327Updated 2 months ago
- Sample extensions, scripts, and API uses for WinDbg.☆739Updated 6 months ago
- Toy scripts for playing with WinDbg JS API☆224Updated 7 months ago
- PDB Downloader - An easier way to download Microsoft's public symbols for Libraries and Executables.☆297Updated 8 years ago
- Research on Windows Kernel Executive Callback Objects☆284Updated 4 years ago
- Monitor activity of any driver☆334Updated 4 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆587Updated 7 years ago
- Detours with just single dependency - NTDLL☆617Updated 2 years ago
- Source code for File Test - Interactive File System Test Tool☆277Updated 3 weeks ago
- Useful scripts for WinDbg using the debugger data model☆402Updated 10 months ago
- 0CCh Windbg extension: include some useful commands☆110Updated last year
- Extended Process Monitor-like tool based on Event Tracing for Windows☆467Updated 5 years ago
- The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracke…☆370Updated last month
- DEFCON 27 workshop - Modern Debugging with WinDbg Preview☆715Updated 3 months ago
- pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers☆840Updated 5 months ago
- This is a repo for small, useful scripts and extensions☆243Updated last year
- XNTSV program for detailed viewing of system structures for Windows.☆456Updated this week
- The Windows Kernel Programming book samples☆618Updated last year
- Windows NT x64 syscall fuzzer☆594Updated last year
- WinDBG Anti-RootKit Extension☆626Updated 4 years ago
- Time Travel Debugging IDA plugin☆562Updated 7 months ago
- RpcView is a free tool to explore and decompile Microsoft RPC interfaces☆953Updated last year
- This driver implements the Intel Processor Trace functionality in Intel Skylake architecture for Microsoft Windows☆433Updated 6 years ago
- Process Monitor X v2☆598Updated last year
- View ETW Provider manifest☆455Updated 3 months ago
- An strace-like program for the Windows 'native' API☆249Updated last month
- ☆157Updated 4 months ago
- C++ Exceptions in Windows Drivers☆204Updated 4 years ago
- Samples for the book Windows Kernel Programming, 2nd edition☆323Updated 2 months ago