☆116Feb 3, 2026Updated last month
Alternatives and similar repositories for Windows-Internals-Learning-Resources
Users that are interested in Windows-Internals-Learning-Resources are comparing it to the libraries listed below
Sorting:
- Extract data of TTD trace file to a minidump☆31Jul 31, 2023Updated 2 years ago
- 🐞 A simple Windows x86 debugging framework written in C++20 that supports software breakpoints and hardware breakpoints. It can be used …☆13Mar 30, 2025Updated 11 months ago
- SRE - Dissecting Malware for Static Analysis & the Complete Command-line Tool☆57Dec 29, 2024Updated last year
- x86/x64 Ring 0/-2 System Freezer/Debugger☆120May 21, 2025Updated 9 months ago
- ALPChecker - a tool to detect spoofing and blinding attacks on the ALPC interaction☆13Feb 13, 2023Updated 3 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆143Sep 19, 2022Updated 3 years ago
- ☆27May 1, 2023Updated 2 years ago
- Local & remote Windows DLL Proxying☆169Jun 17, 2024Updated last year
- Hardcore Debugging☆933Jan 6, 2026Updated last month
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- Atlassian Companion RCE Vulnerability Proof of Concept☆25Dec 15, 2023Updated 2 years ago
- Operating System Design Review: A systematic analysis of modern systems architecture☆338Jan 11, 2026Updated last month
- ☆74Jul 2, 2024Updated last year
- Scan strings or files for malware using the Windows Antimalware Scan Interface☆30Mar 24, 2023Updated 2 years ago
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆130Feb 1, 2026Updated last month
- PoCs for Kernelmode rootkit techniques research.☆432Nov 4, 2025Updated 4 months ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆125Jul 12, 2024Updated last year
- Burp extension used to snip any header from all the requests.☆23Nov 12, 2023Updated 2 years ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆232Feb 12, 2025Updated last year
- I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …☆287Aug 1, 2025Updated 7 months ago
- Cheat Engine alternative written in Rust☆12Nov 15, 2022Updated 3 years ago
- Exploit for CVE-2024-3273, supports single and multiple hosts☆13Apr 7, 2024Updated last year
- فایل ها و فیلم های ورکشاپ ردتیم 2024 با هانت لرن☆32Sep 15, 2024Updated last year
- Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …☆355Feb 26, 2026Updated last week
- A DTrace on Windows Reimplementation☆372Feb 3, 2026Updated last month
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆68Aug 11, 2023Updated 2 years ago
- Windows driver template, using C++20 & cmake & GithubActions☆25Aug 9, 2024Updated last year
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Jul 12, 2024Updated last year
- ☆15May 3, 2024Updated last year
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 3 years ago
- ☆181Apr 24, 2025Updated 10 months ago
- A reference of Windows API function calls, including functions for file operations, process management, memory management, thread managem…☆1,442Oct 4, 2024Updated last year
- ☆84Aug 18, 2022Updated 3 years ago
- BYOVD collection☆24Mar 20, 2024Updated last year
- A CIA tradecraft technique to asynchronously detect when a process is created using WMI.☆138Feb 2, 2026Updated last month
- Windows Local Privilege Escalation Cookbook☆1,281Feb 5, 2026Updated last month
- SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…☆479Jun 25, 2025Updated 8 months ago
- Small tool to play with IOCs caused by Imageload events☆44May 14, 2023Updated 2 years ago
- a tool used to analyze and monitor in named pipes☆194Oct 27, 2024Updated last year