Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.
☆54Sep 21, 2026Updated last month
Alternatives and similar repositories for KnWin32ApiMonitor
Users that are interested in KnWin32ApiMonitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆73Oct 13, 2026Updated last week
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆43Jun 15, 2026Updated 4 months ago
- UEFI SMM payload mapper with hot reload for on-hardware development☆30Jul 5, 2026Updated 3 months ago
- A minimized non-intrusive version of EDR Introspection☆46Jun 30, 2026Updated 3 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆71Jul 12, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆72Jul 12, 2026Updated 3 months ago
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆162Jul 7, 2026Updated 3 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆73Jul 14, 2026Updated 3 months ago
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- VMProtect payload extractor with IAT reconstruction. Monitors section unpacking, dumps PE with fixed headers, reconstructs imports via mo…☆27Apr 14, 2026Updated 6 months ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆14Jul 17, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago
- ☆30Jul 24, 2026Updated 2 months ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆44Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Another Injection Technique which eliminates creations of thread in remote process☆28Jul 7, 2026Updated 3 months ago
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 3 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- ☆32Dec 20, 2025Updated 10 months ago
- Debugger utilizing stealth hooks to hide from debugger detection☆25Aug 22, 2026Updated 2 months ago
- Phantom is project created to perform loading and executing unmanaged code in memory within an IIS environment running in full‑trust mode…☆108Jun 5, 2026Updated 4 months ago
- Collection of custom implementations or Userland Primitives about some WinAPI functions☆47Oct 5, 2026Updated 2 weeks ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.☆320Jul 30, 2026Updated 2 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A POC tool for exploring dev-tunnels☆73May 5, 2026Updated 5 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆112Jun 22, 2026Updated 4 months ago
- Fileless ELF execution☆84Sep 12, 2026Updated last month
- Kernforge is a project intelligence and fuzzing workbench for Windows security, anti-cheat engineering, and evidence-backed verification.☆25Jul 23, 2026Updated 3 months ago
- A tool to automate MS Direct Send emails☆21Mar 16, 2026Updated 7 months ago
- Analyzer application for CoreCLR JIT dumps☆10Sep 10, 2024Updated 2 years ago
- MCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.☆28Sep 23, 2026Updated last month
- Combining KslDump and GhostKatz to dump LSASS using no-vulnerability KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WD…☆12Jul 6, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries☆832Jun 25, 2026Updated 3 months ago
- ☆18Sep 25, 2026Updated 3 weeks ago
- Vibe Reverse Engineer with IDA Pro: An interface for IDA in SQL via live virtual tables. Don't let appearances deceive you! :)☆429Oct 10, 2026Updated last week
- PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation☆30Jul 15, 2026Updated 3 months ago
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month