Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.
☆58Sep 21, 2026Updated last month
Alternatives and similar repositories for KnWin32ApiMonitor
Users that are interested in KnWin32ApiMonitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆73Updated this week
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆43Oct 22, 2026Updated 3 weeks ago
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆163Jul 7, 2026Updated 4 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆72Jul 12, 2026Updated 4 months ago
- ☆72Jul 12, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 9 months ago
- Generate proxy DLLs for sideloading and hijacking research. Mirrors exports, embeds originals, runs payloads.☆17Jun 16, 2026Updated 4 months ago
- injects a payload into explorer.exe, which creates a window in band 4 (ZBID_IMMERSIVE_NOTIFICATION)☆15May 5, 2026Updated 6 months ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- ☆15Aug 21, 2026Updated 2 months ago
- A minimized non-intrusive version of EDR Introspection☆46Jun 30, 2026Updated 4 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆76Jul 14, 2026Updated 3 months ago
- ☆31Jul 24, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 4 months ago
- Phantom is project created to perform loading and executing unmanaged code in memory within an IIS environment running in full‑trust mode…☆108Jun 5, 2026Updated 5 months ago
- ☆32Dec 20, 2025Updated 10 months ago
- Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.☆323Jul 30, 2026Updated 3 months ago
- A POC tool for exploring dev-tunnels☆73May 5, 2026Updated 6 months ago
- A tool to automate MS Direct Send emails☆21Mar 16, 2026Updated 7 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆163Jul 15, 2026Updated 3 months ago
- rax is a CPU emulator that checks its own work.☆243Updated this week
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆113Jun 22, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Kernforge is a project intelligence and fuzzing workbench for Windows security, anti-cheat engineering, and evidence-backed verification.☆25Jul 23, 2026Updated 3 months ago
- 基于 C++23 开发，适用于 多种图形后端 的 IMGUI☆22Updated this week
- Analyzer application for CoreCLR JIT dumps☆10Sep 10, 2024Updated 2 years ago
- Collection of custom implementations or Userland Primitives about some WinAPI functions☆47Oct 5, 2026Updated last month
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆149Jul 7, 2026Updated 4 months ago
- Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)☆438Updated this week
- APISignature is a plugin for x64dbg that help the malware analysts & reverse engineers during analysis by adding a reference for more tha…☆40Aug 15, 2026Updated 2 months ago
- ☆18Sep 25, 2026Updated last month
- Fileless ELF execution☆86Sep 12, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation☆30Jul 15, 2026Updated 3 months ago
- DMA-based memory analysis framework☆21Mar 22, 2026Updated 7 months ago
- Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries☆843Jun 25, 2026Updated 4 months ago
- Combining KslDump and GhostKatz to dump LSASS using no-vulnerability KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WD…☆14Jul 6, 2026Updated 4 months ago
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆34Nov 4, 2026Updated last week
- Another Injection Technique which eliminates creations of thread in remote process☆29Jul 7, 2026Updated 4 months ago
- UEFI SMM mapper with hot reload☆30Jul 5, 2026Updated 4 months ago
Are these results useful?