Alternatives and similar repositories for Windows-Reverse-Engineering

Users that are interested in Windows-Reverse-Engineering are comparing it to the libraries listed below

• CZashi / win-reverse
  ntos shit
  ☆29Updated last year
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆50Updated 4 years ago
• milcert / ExpoMon
  Exports monitoring plugin for x64dbg
  ☆22Updated 2 years ago
• chuangshizhiqiang / WindowsComponentsSUM
  A collection of Windows Components(Mostly is ntoskrnl.exe)
  ☆30Updated 5 years ago
• 474172261 / windows-CET
  ☆13Updated 2 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆48Updated last year
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated 2 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆18Updated 3 years ago
• POPFD / HypervisorBase
  A library for intel VT-x hypervisor functionality supporting EPT shadowing.
  ☆51Updated 4 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆65Updated 5 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆67Updated 2 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆87Updated 5 years ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• shareef12 / libpdb
  Parser for Microsoft Program Database (PDB) files
  ☆77Updated 5 years ago
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆56Updated 4 years ago
• kkent030315 / NtSymbol
  Resolve DOS MZ executable symbols at runtime
  ☆96Updated 4 years ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆27Updated 3 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆36Updated 4 years ago
• Iizerd / BDASM
  Binary DisASseMbler
  ☆24Updated 3 years ago
• NewWorldComingSoon / llvm-msvc-windows-driver-template
  Windows kernel driver template for cmkr and llvm-msvc.
  ☆35Updated 2 years ago
• Nitr0-G / SVM-Hypervisor
  This is a ring -1 header framework in order to simplify the creation of hypervisors on SVM
  ☆27Updated 2 years ago
• ajkhoury / Errata1337
  ☆68Updated 5 years ago
• Air14 / SmmLoader
  Runtime smm module loader
  ☆34Updated 2 years ago
• jxy-s / vfdynf
  Application Verifier Dynamic Fault Injection
  ☆39Updated 4 months ago
• zodiacon / KernelObjectView
  View handles and object for each object type
  ☆64Updated 6 years ago
• nimrodpar / Obfvious
  ☆20Updated 4 years ago
• omerk2511 / NotifyRoutinesResearch
  A research project about Windows notify routines.
  ☆38Updated 5 years ago
• chkpizza / runtime
  VEH Redirect & VEH Debugger
  ☆23Updated 5 years ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆18Updated 3 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 5 years ago