☆127Feb 3, 2026Updated 8 months ago
Alternatives and similar repositories for Windows-Internals-Learning-Resources
Users that are interested in Windows-Internals-Learning-Resources are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- x86/x64 Ring 0/-2 System Freezer/Debugger☆118May 21, 2025Updated last year
- Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)☆68Aug 11, 2023Updated 3 years ago
- I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …☆291Aug 1, 2025Updated last year
- Restoring some of my older tools to the web☆14Oct 18, 2024Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ALPChecker - a tool to detect spoofing and blinding attacks on the ALPC interaction☆13Feb 13, 2023Updated 3 years ago
- Useful scripts for WinDbg using the debugger data model☆434Mar 27, 2024Updated 2 years ago
- An interactive shell to spoof some LOLBins command line☆187Jan 27, 2024Updated 2 years ago
- Operating System Design Review: A systematic analysis of modern systems architecture☆342Jan 11, 2026Updated 9 months ago
- Hardcore Debugging☆943Apr 9, 2026Updated 6 months ago
- Local & remote Windows DLL Proxying☆171Jun 17, 2024Updated 2 years ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆142Sep 19, 2022Updated 4 years ago
- 🐞 A simple Windows x86 debugging framework written in C++20 that supports software breakpoints and hardware breakpoints. It can be used …☆13Mar 30, 2025Updated last year
- A DTrace on Windows Reimplementation☆379May 28, 2026Updated 4 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Windows driver template, using C++20 & cmake & GithubActions☆25Aug 9, 2024Updated 2 years ago
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆141Aug 11, 2026Updated 2 months ago
- Extract data of TTD trace file to a minidump☆32Jul 31, 2023Updated 3 years ago
- A Repository to Track Anti-Forensic Techniques☆121Mar 8, 2023Updated 3 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆128Jul 12, 2024Updated 2 years ago
- ☆74Jul 2, 2024Updated 2 years ago
- SRE - Dissecting Malware for Static Analysis & the Complete Command-line Tool☆58Dec 29, 2024Updated last year
- Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)☆61Aug 11, 2023Updated 3 years ago
- PoCs for Kernelmode rootkit techniques research.☆445Mar 25, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆60Dec 15, 2023Updated 2 years ago
- Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code.☆354Mar 12, 2026Updated 7 months ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆134Jan 2, 2023Updated 3 years ago
- Analyse MSI files for vulnerabilities☆145Aug 30, 2024Updated 2 years ago
- ACL Viewer for Windows☆131May 4, 2025Updated last year
- ☆10Sep 11, 2026Updated last month
- Decrypt Veeam database passwords☆223Dec 8, 2025Updated 10 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆40Jul 12, 2024Updated 2 years ago
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆30Apr 27, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Some drivers I've written while solving exercises from Practical Reverse Engineering☆15Jan 9, 2022Updated 4 years ago
- Small tool to play with IOCs caused by Imageload events☆47May 14, 2023Updated 3 years ago
- PoCs and tools for investigation of Windows process execution techniques☆959Feb 2, 2026Updated 8 months ago
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,913Nov 3, 2024Updated last year
- 🛡️ Assign AD permissions via PowerShell templates — Simplify and standardize AD delegation with reusable PowerShell templates.☆30Apr 12, 2026Updated 6 months ago
- ☆26Sep 29, 2022Updated 4 years ago
- ☆84Nov 21, 2024Updated last year