ETW Explorer
☆45Aug 21, 2026Updated 2 months ago
Alternatives and similar repositories for ETWX
Users that are interested in ETWX are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NoWarbird - Warbird devirtualization project☆87Aug 25, 2026Updated 2 months ago
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 3 months ago
- Monitoring Process Creation/Termination, Thread Creation/Termination and Image Load Notifications from a Kernel Driver☆13Oct 22, 2024Updated 2 years ago
- C++ library for sending processor interrupts via x2apic & xapic☆16Oct 3, 2026Updated last month
- Sophisticated In-Memory PE loader for Cobalt Strike☆24Jan 24, 2026Updated 9 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- portable executable file parser written in modern c++ (20)☆29Oct 28, 2026Updated last week
- Pure Go port of Hacker Disassembler Engine.☆26Feb 21, 2025Updated last year
- The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]☆102Updated this week
- An analysis and static deobfuscation of codedefender.io protected samples.☆98Apr 18, 2026Updated 6 months ago
- Beacon Object File (BOF) that utilizes the Early Bird Cryo Injection technique in order to perform shellcode injection through frozen job…☆19Nov 17, 2025Updated 11 months ago
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- Intercepting cpuid without a hypervisor☆21Updated this week
- The Native Reverse Engineering IDE. Zero-overhead binary analysis, full CPU emulation (PE/ELF), and headless automation. Powered by Capst…☆27Oct 30, 2026Updated last week
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Code proving a 25-year blind spot in all disassemblers. PoC for Intel x64/x86 “ghost instructions.”☆130Nov 2, 2025Updated last year
- usermode thread hijacking detection via working set page fault monitoring☆44Jul 17, 2026Updated 3 months ago
- ☆22Apr 5, 2026Updated 7 months ago
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆105Oct 26, 2025Updated last year
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆83Sep 18, 2026Updated last month
- Dynamic Function Resolution (DFR) definitions for Crystal Palace☆12Dec 19, 2025Updated 10 months ago
- 记录一下Windows下的Hook技巧☆15Jul 15, 2024Updated 2 years ago
- ☆17Oct 24, 2016Updated 10 years ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- chernobog is a Hex-Rays decompiler plugin that defeats Hikari LLVM obfuscation.☆308Oct 24, 2026Updated 2 weeks ago
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated last month
- ☆28Jun 4, 2026Updated 5 months ago
- Virtual Trust Level (VTL 1) secure call tracing☆108Jul 19, 2026Updated 3 months ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- modern gdbstub/rsp server library☆18Feb 11, 2026Updated 8 months ago
- x86-64 Symbolic Execution & LLVM IR Lifting Framework for Deobfuscation☆125Oct 28, 2026Updated last week
- Emulation framework for Android & iOS native libraries☆25Sep 10, 2026Updated last month
- Slaying multi-language LLVM IR with obfuscation passes to achieve JIT execution☆145Oct 31, 2026Updated last week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Experimental static analysis framework.☆14Apr 17, 2024Updated 2 years ago
- 🔬 Guest execution and tracing using the Windows Hypervisor Platform☆62Mar 14, 2026Updated 7 months ago
- Verified IDA is a harness for model-led reverse engineering.☆70Sep 14, 2026Updated last month
- Packet Injection With WFP☆16Jun 5, 2026Updated 5 months ago
- Simple example for getting started with eBPF for Windows☆54Feb 23, 2025Updated last year
- Using the peculiar behaviour of the VPGATHER instructions to determine if an address will fault before it is truly accessed. All done in …☆66Dec 30, 2025Updated 10 months ago
- Function scheduling stealth method using APC with encrypted shellcode☆15Jul 26, 2025Updated last year