ETW Explorer
☆45Aug 21, 2026Updated last month
Alternatives and similar repositories for ETWX
Users that are interested in ETWX are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NoWarbird - Warbird devirtualization project☆87Aug 25, 2026Updated last month
- Verified IDA is a harness for model-led reverse engineering.☆44Sep 14, 2026Updated last month
- Emulation framework for Android & iOS native libraries☆23Sep 10, 2026Updated last month
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 2 months ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆79Aug 1, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆146Aug 20, 2026Updated last month
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- ☆24Sep 12, 2026Updated last month
- 记录一下Windows下的Hook技巧☆15Jul 15, 2024Updated 2 years ago
- The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]☆93Updated this week
- Windows kernel driver and usermode app emulator for x86-64 and ARM64 targets.☆171Updated this week
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated 2 weeks ago
- How to Register your own AV with Defender☆37Aug 27, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- libidacpp: header-only C++20 extensions for the IDA SDK☆28Oct 5, 2026Updated last week
- Automated Function Identification in .NET binaries☆49Aug 5, 2026Updated 2 months ago
- [Fork] Hardening code obfuscation against automated attacks☆20Jul 1, 2026Updated 3 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆45Jun 14, 2026Updated 4 months ago
- A Binary Ninja plugin to deobfuscate Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.☆50Jul 28, 2024Updated 2 years ago
- Decrypt VMware vTPM-encrypted .vmem/.vmsn/.vmss/.nvram from the VM password, and flatten the .vmem to a Volatility-ready image.☆55Jul 4, 2026Updated 3 months ago
- Bridge between agents and IDA Pro.☆94Sep 28, 2026Updated 2 weeks ago
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated last week
- Pure Go port of Hacker Disassembler Engine.☆26Feb 21, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- LLVM 21 pass plugin for A²MBA architectural and anti-generalization hardening of mixed Boolean-arithmetic expressions.☆27Oct 10, 2026Updated last week
- 🔬 Guest execution and tracing using the Windows Hypervisor Platform☆61Mar 14, 2026Updated 7 months ago
- Intermediate Symbol Representation☆14Oct 5, 2026Updated last week
- The Native Reverse Engineering IDE. Zero-overhead binary analysis, full CPU emulation (PE/ELF), and headless automation. Powered by Capst…☆26Sep 23, 2026Updated 3 weeks ago
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆25Oct 8, 2026Updated last week
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month
- Run ordinary Linux programs (e.g., Python, Node.js, .NET, Go, Bash) inside Hyperlight micro-VMs☆36Updated this week
- The binary you run is not the program you wrote.☆147Aug 5, 2026Updated 2 months ago
- A low-entropy shellcode executor that encodes shellcode bytes into common English words, with anti-debugging capabilities.☆21Aug 10, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆103Oct 26, 2025Updated 11 months ago
- An analysis and static deobfuscation of codedefender.io protected samples.☆98Apr 18, 2026Updated 6 months ago
- irp -> ntfs (bypass minifilter)☆10Feb 1, 2022Updated 4 years ago
- Python tools for reverse engineering Microsoft 3D Movie Maker☆14Feb 28, 2021Updated 5 years ago
- Python bindings for the Icicle emulator.☆44Nov 6, 2025Updated 11 months ago
- Capability extraction from Time Travel Debugging Traces with C++ Implementation of CAPA that supports code scanning☆31Sep 24, 2026Updated 3 weeks ago
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆57Jul 8, 2026Updated 3 months ago