Alternatives and similar repositories for xntsv

Users that are interested in xntsv are comparing it to the libraries listed below

• horsicq / XOpcodeCalc
  Opcode calculator / ASM calculator
  ☆388Updated this week
• therealdreg / DbgChild
  Debug Child Process Tool (auto attach)
  ☆295Updated last year
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆428Updated 3 months ago
• x64dbg / Scripts
  A collection of x64dbg scripts. Feel free to submit a pull request to add your script.
  ☆527Updated last year
• zodiacon / ProcMonXv2
  Process Monitor X v2
  ☆616Updated last year
• hfiref0x / NtCall64
  Windows NT x64 syscall fuzzer
  ☆615Updated 2 weeks ago
• horsicq / stringsx64dbg
  Strings plugin for x64dbg
  ☆233Updated this week
• horsicq / PDBRipper
  PDBRipper is a utility for extract an information from PDB-files.
  ☆844Updated this week
• can1357 / NtRays
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆607Updated 5 months ago
• x64dbg / x64dbgida
  Official x64dbg plugin for IDA Pro.
  ☆521Updated 9 months ago
• can1357 / ByePg
  Defeating Patchguard universally for Windows 8, Windows 8.1 and all versions of Windows 10 regardless of HVCI.
  ☆885Updated 5 years ago
• MartinDrab / IRPMon
  The goal of the tool is to monitor requests received by selected device objects or kernel drivers. The tool is quite similar to IrpTracke…
  ☆388Updated 6 months ago
• swwwolf / wdbgark
  WinDBG Anti-RootKit Extension
  ☆634Updated 4 years ago
• horsicq / Nauz-File-Detector
  Linker/Compiler/Tool detector for Windows, Linux and MacOS.
  ☆559Updated this week
• ayoubfaouzi / windows-internals
  My notes while studying Windows internals
  ☆433Updated 7 months ago
• wbenny / DetoursNT
  Detours with just single dependency - NTDLL
  ☆645Updated 2 years ago
• CheckPointSW / showstopper
  ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solution…
  ☆211Updated 3 years ago
• hzqst / unicorn_pe
  Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.
  ☆855Updated last year
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆421Updated 4 years ago
• VergiliusProject / vergilius-project
  This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially docum…
  ☆208Updated 5 months ago
• Nukem9 / SwissArmyKnife
  x64dbg utility for linker map files, diff files, PEiD/IDA signatures, and code signature generation.
  ☆297Updated 4 years ago
• hugsy / CFB
  Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.
  ☆324Updated last year
• hasherezade / libpeconv
  A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
  ☆1,248Updated last month
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆418Updated last year
• 0xnobody / vmpattack
  A VMP to VTIL lifter.
  ☆439Updated 4 years ago
• hasherezade / bearparser
  Portable Executable parsing library (from PE-bear)
  ☆657Updated 2 months ago
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆370Updated 2 weeks ago
• mrexodia / dumpulator
  An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in gen…
  ☆815Updated last year
• 4d61726b / VirtualKD-Redux
  VirtualKD-Redux - A revival and modernization of VirtualKD
  ☆906Updated last year
• marakew / syser
  syser debugger x32/x64 ring3 with source level debugging/watch view/struct view
  ☆285Updated 4 months ago