Alternatives and similar repositories for re-sysinternals-suite:

Users that are interested in re-sysinternals-suite are comparing it to the libraries listed below

• backengineering / pdbgen2
  Generate a PDB file given the old PDB file and an address mapping
  ☆47Updated last month
• backengineering / msrexec
  Elevate arbitrary MSR writes to kernel execution.
  ☆34Updated last year
• m417z / x64dbg-symbol-tldr
  An x64dbg plugin which helps make sense of long C++ symbols
  ☆59Updated last year
• jonomango / pe-builder
  Header-only C++ library for producing PE files.
  ☆32Updated last year
• zodiacon / WinEventHooks
  SetWinEventHook Sample
  ☆47Updated last year
• NewWorldComingSoon / llvm-msvc-windows-driver-template
  Windows kernel driver template for cmkr and llvm-msvc.
  ☆34Updated last year
• FunnyWhaleDev / AlterLoadDll
  Load dll with undocumented functions and debug symbols
  ☆47Updated 9 months ago
• SamuelTulach / winzentool
  Port of zentool to Windows
  ☆24Updated 2 months ago
• build-cpp / wdk_template
  Windows kernel driver template for cmkr (with testsigning).
  ☆32Updated last year
• sh4m2hwz / devirt_vmp
  devirtualization vmprotect
  ☆62Updated 2 years ago
• greyb1t / GreyM
  Me fockin' pe protector
  ☆45Updated 2 years ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆86Updated last month
• 1hAck-0 / zeroimport
  ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…
  ☆48Updated 2 years ago
• SamuelTulach / SecureGame
  Proof-of-concept game using VBS enclaves to protect itself from cheating
  ☆40Updated 5 months ago
• buzzer-re / BulletTrain
  A manual PE mapping implementation, aka reflective loader
  ☆19Updated 2 years ago
• backengineering / sigbreaker-llvm-lit
  All LLVM binaries scrambled with SigBreaker and used to test against llvm-lit
  ☆14Updated 3 weeks ago
• zodiacon / KObjects
  Sample for Creating a new kernel object type and supporting API
  ☆24Updated 8 months ago
• jonomango / chum
  Binary rewriter for 64-bit PE files.
  ☆71Updated last year
• Internet-2-0 / Malcore-x64dbg
  This x64dbg plugin allows you to upload your sample to Malcore and view the results.
  ☆35Updated last year
• ergrelet / themida-spotter-bn
  A Binary Ninja plugin to detect Themida, WinLicense and Code Virtualizer's obfuscated code locations.
  ☆79Updated 9 months ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• kkent030315 / Van1338
  A journal for $6,000 Riot Vanguard bounty.
  ☆63Updated last year
• ZehMatt / zyemu
  x86-64 user mode emulation using Zydis
  ☆46Updated 3 months ago
• tandasat / CVE-2024-21305
  Report and exploit of CVE-2024-21305.
  ☆34Updated last year
• milankovo / zydisinfo
  ☆18Updated 2 months ago
• mrexodia / REToolSync
  Collaboration platform for reverse engineering tools.
  ☆40Updated 4 months ago
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆100Updated last year
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆63Updated 8 months ago
• pinwhell / MSPDBX
  Lightweight PDB symbol parser and resolver
  ☆24Updated 6 months ago
• rbmm / NtDetours
  Detours implementation (x64/x86) which used only ntdll import
  ☆90Updated 10 months ago