☆127Feb 3, 2026Updated 5 months ago
Alternatives and similar repositories for Windows-Internals-Learning-Resources
Users that are interested in Windows-Internals-Learning-Resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- x86/x64 Ring 0/-2 System Freezer/Debugger☆118May 21, 2025Updated last year
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆68Aug 11, 2023Updated 2 years ago
- I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …☆291Aug 1, 2025Updated 11 months ago
- ALPChecker - a tool to detect spoofing and blinding attacks on the ALPC interaction☆13Feb 13, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Useful scripts for WinDbg using the debugger data model☆436Mar 27, 2024Updated 2 years ago
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- Operating System Design Review: A systematic analysis of modern systems architecture☆344Jan 11, 2026Updated 6 months ago
- Hardcore Debugging☆945Apr 9, 2026Updated 3 months ago
- Local & remote Windows DLL Proxying☆173Jun 17, 2024Updated 2 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆143Sep 19, 2022Updated 3 years ago
- 🐞 A simple Windows x86 debugging framework written in C++20 that supports software breakpoints and hardware breakpoints. It can be used …☆13Mar 30, 2025Updated last year
- A DTrace on Windows Reimplementation☆374May 28, 2026Updated last month
- Windows driver template, using C++20 & cmake & GithubActions☆25Aug 9, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆138Feb 1, 2026Updated 5 months ago
- Extract data of TTD trace file to a minidump☆30Jul 31, 2023Updated 2 years ago
- A Repository to Track Anti-Forensic Techniques☆121Mar 8, 2023Updated 3 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆126Jul 12, 2024Updated 2 years ago
- ☆74Jul 2, 2024Updated 2 years ago
- SRE - Dissecting Malware for Static Analysis & the Complete Command-line Tool☆58Dec 29, 2024Updated last year
- PoCs for Kernelmode rootkit techniques research.☆441Mar 25, 2026Updated 4 months ago
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆62Aug 11, 2023Updated 2 years ago
- ☆60Dec 15, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆341Mar 12, 2026Updated 4 months ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆135Jan 2, 2023Updated 3 years ago
- Analyse MSI files for vulnerabilities☆145Aug 30, 2024Updated last year
- ACL Viewer for Windows☆133May 4, 2025Updated last year
- ☆10Apr 19, 2026Updated 3 months ago
- Decrypt Veeam database passwords☆225Dec 8, 2025Updated 7 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆40Jul 12, 2024Updated 2 years ago
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆28Apr 27, 2024Updated 2 years ago
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Small tool to play with IOCs caused by Imageload events☆47May 14, 2023Updated 3 years ago
- PoCs and tools for investigation of Windows process execution techniques☆958Feb 2, 2026Updated 5 months ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,896Nov 3, 2024Updated last year
- ☆26Sep 29, 2022Updated 3 years ago
- ☆84Nov 21, 2024Updated last year
- anti-ransomware file-system filter☆71Sep 3, 2024Updated last year
- Windows 常用版本内核文件收集☆13Sep 19, 2023Updated 2 years ago