Alternatives and similar repositories for xntsv:

Users that are interested in xntsv are comparing it to the libraries listed below

• hfiref0x / NtCall64
  Windows NT x64 syscall fuzzer
  ☆593Updated last year
• can1357 / NtRays
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆578Updated last month
• can1357 / ByePg
  Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
  ☆852Updated 5 years ago
• horsicq / PDBRipper
  PDBRipper is a utility for extract an information from PDB-files.
  ☆822Updated this week
• hzqst / unicorn_pe
  Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
  ☆819Updated 9 months ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆390Updated 3 years ago
• therealdreg / DbgChild
  Debug Child Process Tool (auto attach)
  ☆281Updated last year
• hasherezade / libpeconv
  A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
  ☆1,170Updated last week
• horsicq / Nauz-File-Detector
  Linker/Compiler/Tool detector for Windows, Linux and MacOS.
  ☆543Updated this week
• zodiacon / ProcMonXv2
  Process Monitor X v2
  ☆598Updated last year
• hugsy / CFB
  Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.
  ☆316Updated 11 months ago
• x64dbg / Scripts
  A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
  ☆511Updated 8 months ago
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆594Updated 7 years ago
• horsicq / XOpcodeCalc
  Opcode calculator / ASM calculator
  ☆379Updated this week
• swwwolf / wdbgark
  WinDBG Anti-RootKit Extension
  ☆626Updated 4 years ago
• hasherezade / bearparser
  Portable Executable parsing library (from PE-bear)
  ☆653Updated 6 months ago
• 4d61726b / VirtualKD-Redux
  VirtualKD-Redux - A revival and modernization of VirtualKD
  ☆860Updated 8 months ago
• x64dbg / x64dbgida
  Official x64dbg plugin for IDA Pro.
  ☆485Updated 5 months ago
• wbenny / DetoursNT
  Detours with just single dependency - NTDLL
  ☆618Updated 2 years ago
• 0xnobody / vmpattack
  A VMP to VTIL lifter.
  ☆430Updated 3 years ago
• ayoubfaouzi / windows-internals
  My notes while studying Windows internals
  ☆411Updated 2 months ago
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆404Updated 4 months ago
• HyperSine / Windows10-CustomKernelSigners
  Load self-signed drivers without TestSigning or disable DSE. Transferred from https://github.com/DoubleLabyrinth/Windows10-CustomKernelSi…
  ☆716Updated 5 years ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆284Updated 5 years ago
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆567Updated 8 months ago
• hzqst / Syscall-Monitor
  Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+
  ☆733Updated 7 years ago
• hasherezade / IAT_patcher
  Persistent IAT hooking application - based on bearparser
  ☆251Updated 2 years ago
• zodiacon / windowskernelprogrammingbook2e
  Samples for the book Windows Kernel Programming, 2nd edition
  ☆325Updated 2 months ago
• horsicq / stringsx64dbg
  Strings plugin for x64dbg
  ☆225Updated this week
• mrexodia / dumpulator
  An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…
  ☆779Updated last year