Alternatives and similar repositories for Windows-Reverse-Engineering

Users that are interested in Windows-Reverse-Engineering are comparing it to the libraries listed below

• chuangshizhiqiang / WindowsComponentsSUM
  A collection of Windows Components(Mostly is ntoskrnl.exe)
  ☆29Updated 4 years ago
• yardenshafir / KernelDataStructureFinder
  Driver and WinDBG scripts to dump information about all resources and lookaside lists
  ☆67Updated 5 years ago
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆50Updated 4 years ago
• 474172261 / windows-CET
  ☆13Updated 2 years ago
• redplait / armpatched
  clone of armadillo patched for windows
  ☆47Updated 10 months ago
• CZashi / win-reverse
  ntos shit
  ☆26Updated last year
• omerk2511 / NotifyRoutinesResearch
  A research project about Windows notify routines.
  ☆37Updated 5 years ago
• ioncodes / rapid-kdbg-hyperv
  ☆15Updated 2 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆27Updated 2 years ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆34Updated 3 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆85Updated 4 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated 2 years ago
• NewWorldComingSoon / llvm-msvc-windows-driver-template
  Windows kernel driver template for cmkr and llvm-msvc.
  ☆35Updated last year
• milcert / ExpoMon
  Exports monitoring plugin for x64dbg
  ☆22Updated 2 years ago
• zodiacon / KernelObjectView
  View handles and object for each object type
  ☆64Updated 6 years ago
• Biswa96 / PDBDownloader
  Standalone program to download PDB Symbol files for debugging without WDK
  ☆79Updated 6 years ago
• malware-unicorn / pteroioctl-hook
  A driver to implement IOCTL hooking
  ☆24Updated 3 years ago
• OSRDrivers / penter
  penter hook example and driver time recorder
  ☆31Updated 7 years ago
• chkpizza / runtime
  VEH Redirect & VEH Debugger
  ☆23Updated 5 years ago
• therealdreg / ida_vmware_windows_gdb
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)
  ☆67Updated 2 years ago
• shareef12 / libpdb
  Parser for Microsoft Program Database (PDB) files
  ☆76Updated 5 years ago
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆55Updated 3 years ago
• Shhoya / Shh0yaKernelHook
  Shh0ya Kernel Hook Driver
  ☆24Updated 4 years ago
• tandasat / ia32-doc
  IA32-doc is a project which aims to put as many definitions from the Intel Manual into machine-processable format as possible
  ☆17Updated 3 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 4 years ago
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆36Updated 3 years ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆19Updated 3 years ago
• ioncodes / pooldump
  ☆31Updated 3 years ago
• nlykkei / llvm-ir-obfuscation
  Collection of obfuscation, tamper-proofing, and watermarking algorithms targeting LLVM IR.
  ☆75Updated 5 years ago
• yjugl / mitimon
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Updated 2 years ago