Alternatives and similar repositories for SXSEXP:

Users that are interested in SXSEXP are comparing it to the libraries listed below

• zodiacon / PoolMonX
  A GUI version of the classic PoolMon tool
  ☆113Updated 6 years ago
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆129Updated 11 months ago
• zodiacon / PoolMonXv2
  Kernel Pool Monitor
  ☆123Updated 3 years ago
• ionescu007 / wnfun
  WNF Utilities 4 Newbies (WNFUN)
  ☆94Updated 6 years ago
• ladislav-zezula / FileTest
  Source code for File Test - Interactive File System Test Tool
  ☆282Updated last month
• m417z / global-inject-demo
  A global injection and hooking example
  ☆138Updated last year
• zodiacon / ObjectExplorer
  Explore Kernel Objects on Windows
  ☆214Updated last month
• arizvisa / ndk
  A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
  ☆54Updated 5 years ago
• 0xeb / WinTools
  A collection of free miscellaneous Windows tools
  ☆134Updated 8 months ago
• kobykahane / NpEtw
  Named pipe I/O ETW provider for Windows
  ☆70Updated 4 years ago
• ntdiff / headers
  ☆162Updated 7 months ago
• zodiacon / DriverMon
  Monitor activity of any driver
  ☆334Updated 4 years ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆140Updated 6 years ago
• zodiacon / GflagsX
  Enhanced version of the GFlags tool
  ☆83Updated 5 years ago
• hfiref0x / AuthHashCalc
  Authenticode Hash Calculator for PE32/PE32+ files
  ☆111Updated last year
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆87Updated 9 years ago
• M2Team / Privexec
  Run the program with the specified permission level (C++20 required)
  ☆344Updated 2 months ago
• zodiacon / TotalPE2
  PE Viewer
  ☆179Updated 3 months ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆137Updated 5 years ago
• m417z / winapiexec
  A small tool that allows to run WinAPI functions through command line parameters
  ☆188Updated 2 years ago
• DownWithUp / CallMon
  CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers
  ☆138Updated 4 years ago
• jdu2600 / Windows10EtwEvents
  Events from all manifest-based and mof-based ETW providers across Windows 10 versions
  ☆295Updated last year
• OSRDrivers / kmexts
  Simple driver to register all available process, thread, image, Registry, and Object callbacks
  ☆121Updated 7 years ago
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆176Updated 3 years ago
• gerhart01 / LiveCloudKd
  Hyper-V Research is trendy now
  ☆163Updated last week
• dishather / richprint
  Print compiler information stored in Rich Header of PE executables.
  ☆135Updated last week
• bb107 / WinSudo
  Execute commands as local system.
  ☆64Updated 5 years ago
• harryanon / r0ak
  ☆106Updated 6 years ago
• ionescu007 / HookingNirvana
  Recon 2015 Presentation from Alex Ionescu
  ☆234Updated 9 years ago
• msuiche / LiveCloudKd
  Hyper-V Research is trendy now
  ☆178Updated last year