The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
☆153May 29, 2020Updated 6 years ago
Alternatives and similar repositories for Windows-Insight
Users that are interested in Windows-Insight are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A repository of my presentations☆164Nov 16, 2023Updated 2 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆39Oct 7, 2021Updated 5 years ago
- Will try to put here slides from now on when I give a talk☆24Oct 11, 2021Updated 5 years ago
- 🔵 Ethereum and BNB (BSC) Mev bot - Arbitrage☆367Mar 4, 2026Updated 7 months ago
- Call arbitrary Windows kernel-mode functions from Python on another machine☆46Sep 17, 2021Updated 5 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Dump of win32k POCs for bugs I've found☆381Mar 6, 2022Updated 4 years ago
- Control Flow Guard Teleportation demo☆24Jul 28, 2019Updated 7 years ago
- Virtual Machine Introspection, Tracing & Debugging☆603Feb 22, 2022Updated 4 years ago
- ☆43Aug 30, 2018Updated 8 years ago
- CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.☆338Mar 26, 2024Updated 2 years ago
- PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.☆430May 22, 2020Updated 6 years ago
- Automatic function exporting and linking for fuzzing cross-architecture binaries.☆51Sep 9, 2018Updated 8 years ago
- This repo contains code of JScript .NET which can be used as alternative to csc.exe to run potentially malicious code, which ships in all…☆12Nov 8, 2019Updated 6 years ago
- Mario & Luigi - Tools for sniffing Windows Named Pipes communication☆127Nov 15, 2016Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- ☆46Aug 21, 2019Updated 7 years ago
- scripts/plugins for IDA Pro☆179Jan 10, 2025Updated last year
- A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.☆58Jun 11, 2019Updated 7 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆38Oct 21, 2020Updated 6 years ago
- Demos and presentation from SECArmy Village Grayhat 2020☆36Mar 15, 2023Updated 3 years ago
- Automate AV evasion by calling AMSI☆87May 31, 2023Updated 3 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆67Apr 4, 2020Updated 6 years ago
- Persistent through COM Hijacking☆23Jan 15, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Research on Windows Kernel Executive Callback Objects☆316Feb 22, 2020Updated 6 years ago
- Endpoint detection & Malware analysis software☆234Dec 20, 2019Updated 6 years ago
- Headers for linking your software with ntdll.dll☆15Nov 4, 2020Updated 5 years ago
- PE File Blessing - To continue or not to continue☆86Nov 23, 2019Updated 6 years ago
- UAC Bypass with mmc via alpc☆157Apr 5, 2019Updated 7 years ago
- sploit☆66Dec 21, 2019Updated 6 years ago
- crauEmu is an uEmu extension for developing and analyzing payloads for code-reuse attacks☆110Dec 11, 2019Updated 6 years ago
- A function tracer☆92Jun 4, 2019Updated 7 years ago
- A hypervisor for fuzzing built with WHVP and Bochs☆385Feb 5, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆11Jun 9, 2020Updated 6 years ago
- ☆133Dec 15, 2019Updated 6 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- Tool for injecting a "TCP Relay" managed assembly into unmanaged processes☆117May 23, 2019Updated 7 years ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆49Apr 9, 2019Updated 7 years ago
- Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.☆93Feb 24, 2019Updated 7 years ago
- ReaCOM has got a lot of tools to use and is related to component object model☆72Feb 3, 2020Updated 6 years ago