Alternatives and similar repositories for STrace:

Users that are interested in STrace are comparing it to the libraries listed below

• Fyyre / DrvMon
  Advanced driver monitoring utility.
  ☆204Updated 2 years ago
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆148Updated last year
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆567Updated 8 months ago
• ergrelet / windiff
  Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …
  ☆331Updated this week
• commial / ttd-bindings
  Bindings for Microsoft WinDBG TTD
  ☆216Updated last year
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆196Updated 3 weeks ago
• KiFilterFiberContext / warbird-hook
  Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard
  ☆244Updated 2 years ago
• yardenshafir / WinDbg_Scripts
  Useful scripts for WinDbg using the debugger data model
  ☆402Updated 11 months ago
• ergrelet / resym
  Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.
  ☆309Updated 3 weeks ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆390Updated 3 years ago
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆343Updated 4 months ago
• hfiref0x / WubbabooMark
  Debugger Anti-Detection Benchmark
  ☆307Updated last year
• thesecretclub / SandboxBootkit
  Bootkit for Windows Sandbox to disable DSE/PatchGuard.
  ☆269Updated 4 months ago
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆135Updated 2 years ago
• gerhart01 / Hyper-V-Internals
  Internals information about Hyper-V
  ☆684Updated 2 months ago
• can1357 / NtRays
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆578Updated last month
• tandasat / hvext
  The Windbg extensions to study Hyper-V on Intel and AMD processors.
  ☆150Updated last week
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆223Updated 7 months ago
• pathtofile / Sealighter
  Sysmon-Like research tool for ETW
  ☆350Updated 2 years ago
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆193Updated this week
• zeze-zeze / ioctlance
  A tool that is used to hunt vulnerabilities in x64 WDM drivers
  ☆175Updated last week
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆200Updated 3 months ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆284Updated 5 years ago
• ioncodes / ceload
  BYOVD: Loading dbk64.sys and grabbing a handle to it
  ☆148Updated 2 years ago
• Xyrem / HyperDeceit
  HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…
  ☆358Updated last year
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆404Updated 4 months ago
• therealdreg / masm32-kernel-programming
  masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)
  ☆118Updated last year
• thalium / symless
  ☆196Updated last year
• Signal-Labs / IOCTLDump
  ☆142Updated last year
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆224Updated 2 years ago