Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.
☆46Aug 24, 2026Updated 2 weeks ago
Alternatives and similar repositories for KnWin32ApiMonitor
Users that are interested in KnWin32ApiMonitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆74Updated this week
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆44Jun 15, 2026Updated 2 months ago
- Radar2 live SQL AI connector for Vibe Reverse Engineering☆17Jul 31, 2026Updated last month
- An IDA Pro / Hex-Rays plugin that turns noisy pseudocode into reviewable, kernel-aware cleanup artifacts☆161Jul 7, 2026Updated 2 months ago
- AI-driven agent runtime for Windows PE binary analysis. Turns IDA Pro decompiled code and SQLite databases produced by DeepExtractIDA int…☆19May 6, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆110Jun 22, 2026Updated 2 months ago
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 7 months ago
- Kernforge is a project intelligence and fuzzing workbench for Windows security, anti-cheat engineering, and evidence-backed verification.☆25Jul 23, 2026Updated last month
- Noradrenaline is a collection of high-performance post-exploitation shared libraries designed for native execution on macOS and Linux end…☆31Sep 1, 2026Updated last week
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆51Jun 28, 2026Updated 2 months ago
- A tool to automate MS Direct Send emails☆21Mar 16, 2026Updated 5 months ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆115Jul 14, 2026Updated last month
- ☆18Mar 10, 2026Updated 6 months ago
- Static devirtualizer for VMProtect 3.0-3.5. Lifts virtualized code to LLVM using Remill and strips the VM layer through optimization.☆314Jul 30, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆68Jul 12, 2026Updated 2 months ago
- Unpacker for Agile.NET☆13Mar 12, 2023Updated 3 years ago
- Import and export custom Sysmon configurations using an interactive GUI that lets you build event rules, manage filters, and generate cle…☆31Mar 10, 2026Updated 6 months ago
- Vibe Reverse Engineer with IDA SQL: An interface for IDA in SQL via live virtual tables☆405Jul 26, 2026Updated last month
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆81Jul 10, 2026Updated 2 months ago
- Phantom is project created to perform loading and executing unmanaged code in memory within an IIS environment running in full‑trust mode…☆107Jun 5, 2026Updated 3 months ago
- ☆20Apr 5, 2025Updated last year
- Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique☆21Dec 3, 2024Updated last year
- Proof of concept to detect module stomping detection by looking for modified .pdata sections.☆41Jun 11, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AI-assisted IDA Pro plugin (local llama.cpp) for function explanations, renames, struct detection, and batch analysis — human-in-the-loop…☆44Sep 5, 2026Updated last week
- IDA Pro resources, scripts, and configurations☆199Updated this week
- A C# Source Generator for obfuscating string or byte array values using multi-byte xor encryption.☆15Jun 12, 2024Updated 2 years ago
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 6 months ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆39Jul 4, 2026Updated 2 months ago
- String Decryptor for DC.NET Protector (tested on v1.1.0.1)☆11Apr 26, 2021Updated 5 years ago
- Obfusk8: lightweight Obfuscation library based on C++17 / Header Only for windows binaries☆818Jun 25, 2026Updated 2 months ago
- Deobfuscator for NetShield Protector☆20Jun 29, 2023Updated 3 years ago
- Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…☆88Nov 6, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 6 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆61Jul 12, 2026Updated 2 months ago
- ☆20Jul 5, 2026Updated 2 months ago
- Stack trace formatter for dotnet written and formatted in C#.☆20Feb 15, 2025Updated last year
- DeepProbe - Memory Forensics Framework☆16May 16, 2026Updated 3 months ago
- Function scheduling stealth method using APC with encrypted shellcode☆15Jul 26, 2025Updated last year
- SocioSential is an open-source OSINT framework that collects and analyzes social data to surface emotional patterns, behavioral anomalies…☆69Apr 19, 2026Updated 4 months ago