Standalone tool to explore the security model of Windows and its NT kernel. Use it to introspect privilege assignments and access right assignments, enumerate attack surfaces from the point of view of a sandboxed process, etc.
☆31May 21, 2019Updated 7 years ago
Alternatives and similar repositories for ntsec
Users that are interested in ntsec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Lists all visible objects in the Windows kernel object namespace, a command-line WinObj☆16May 27, 2018Updated 8 years ago
- A test project to try the new win32k.sys system call filtering mitigation in Windows 10☆16Mar 17, 2019Updated 7 years ago
- Static library and headers for linking your software with ntdll.dll☆39Dec 16, 2019Updated 6 years ago
- Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.☆20Jul 31, 2019Updated 7 years ago
- DNS over HTTPS Servers☆13Nov 19, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Inlining functions in IDA HexRays using microcode. Abandoned due to official outline support in IDA v8.0☆16Feb 19, 2023Updated 3 years ago
- Kusto Query Language parser and planner for DataFusion☆13Aug 10, 2025Updated last year
- ☆28Jan 15, 2021Updated 5 years ago
- Collection of dockerfiles to build containers☆13Mar 19, 2018Updated 8 years ago
- Windows eventlog formatting, live fetching and querying utility in C☆20May 26, 2020Updated 6 years ago
- Tools for building TIL for IDA SDK & exporting them to python wrapper☆21Jun 26, 2023Updated 3 years ago
- Window Executable file Function tracer using Debugging API☆40Sep 26, 2019Updated 7 years ago
- Very tiny and selective implementation of STL for Windows NT kernel mode drivers☆18Jun 22, 2021Updated 5 years ago
- MircoSoft Detours 4.0.1，MIT License，Support X86，X64，ARM，IA64☆12Apr 23, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Convert IDA Type Library `*.til` to Compilable C Header!☆19Mar 9, 2023Updated 3 years ago
- Getting windows operating system version information by 3 ways. using APIs,GetVersionEx, VerifyVersionInfo☆14Apr 9, 2015Updated 11 years ago
- A sample bot for Cobalt Strike 3☆22Jun 11, 2016Updated 10 years ago
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆29May 18, 2022Updated 4 years ago
- From 2011: Quickly search for files in NTFS volumes parsing the Master File Table (MFT). A decent amount of how NTFS and MFT work was pai…☆28Oct 14, 2019Updated 7 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆19Mar 3, 2016Updated 10 years ago
- Modifies the code of the RtlUserThreadStart callback and reads the arguments passed to it. Then it changes the initial execution argument…☆17Mar 4, 2018Updated 8 years ago
- 常用代码类☆13May 31, 2014Updated 12 years ago
- ☆12Feb 19, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆10Aug 9, 2024Updated 2 years ago
- NTrace -- a function boundary tracing tool for Windows user and kernel mode☆22Nov 1, 2013Updated 13 years ago
- 软件保护及分析技术——原理与实践☆18Nov 30, 2017Updated 8 years ago
- CyoHash is a simple shell extension that is used from within Windows Explorer to calculate the MD5 hash, SHA-1 hash, SHA-2 hash (SHA-256,…☆23Oct 19, 2019Updated 7 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- ☆83Dec 3, 2017Updated 8 years ago
- Code Integrity Violation Spotter☆17Jun 11, 2024Updated 2 years ago
- MazzCrypt - You won't ever get caught. A [was-private] polymorphic source code parser to randomize executables. Inspired by PolyLoader by…☆11Aug 29, 2016Updated 10 years ago
- Windows OS Internals Curriculum Resource Kit ACADEMIC☆19Nov 4, 2017Updated 8 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- C++ WMI class library☆56Jun 7, 2026Updated 4 months ago
- ☆19Sep 27, 2018Updated 8 years ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Oct 10, 2018Updated 8 years ago
- The noise swiss army knife☆46Oct 27, 2026Updated last week
- Demonstrates how to populate SID History on security principals migrated cross AD forest from PowerShell session☆15Sep 24, 2026Updated last month
- A MultiTouch driver for touch injection on Windows 7☆12Oct 5, 2016Updated 10 years ago
- Go module that allows you to authenticate to Azure with a well known client ID using interactive logon and grab the token☆27Dec 1, 2022Updated 3 years ago