Alternatives and similar repositories for NtTrace:

Users that are interested in NtTrace are comparing it to the libraries listed below

• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆204Updated 4 years ago
• serge1 / COFFI
  A header-only C++ library for accessing files in COFF binary format. (Including Windows PE/PE+ formats)
  ☆192Updated 3 months ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆284Updated 4 years ago
• wbenny / DetoursNT
  Detours with just single dependency - NTDLL
  ☆617Updated 2 years ago
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆196Updated 7 months ago
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆274Updated last month
• jxy-s / stlkrn
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆402Updated last year
• hfiref0x / NtCall64
  Windows NT x64 syscall fuzzer
  ☆594Updated last year
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆178Updated 3 years ago
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆200Updated 3 months ago
• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆405Updated 4 months ago
• SinaKarvandi / Process-Magics
  This is a collection of interesting codes about Windows Process creation.
  ☆232Updated last year
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆338Updated 2 weeks ago
• anhkgg / awesome-windbg-extensions
  awesome windbg extensions
  ☆323Updated 5 years ago
• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆215Updated 4 years ago
• wbenny / pdbex
  pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers
  ☆840Updated 5 months ago
• HoShiMin / formatPE
  A bunch of parsers for PE and PDB formats in C++
  ☆233Updated 9 months ago
• progmboy / openprocmon
  open source process monitor
  ☆260Updated last year
• 0vercl0k / windbg-scripts
  A bunch of JavaScript extensions for WinDbg.
  ☆327Updated 2 months ago
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆302Updated last month
• ladislav-zezula / FileTest
  Source code for File Test - Interactive File System Test Tool
  ☆277Updated 3 weeks ago
• ergrelet / resym
  Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.
  ☆306Updated last week
• therealdreg / DbgChild
  Debug Child Process Tool (auto attach)
  ☆281Updated last year
• ntdiff / headers
  ☆157Updated 4 months ago
• mrexodia / AppInitHook
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆167Updated 2 years ago
• gdabah / distormx
  The ultimate hooking library
  ☆262Updated 3 years ago
• ntdiff / ntdiff
  ☆124Updated 4 months ago
• can1357 / NtRays
  Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.
  ☆571Updated 3 weeks ago
• m417z / ntdoc
  Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers
  ☆215Updated this week
• 0xcpu / WinAltSyscallHandler
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆209Updated 5 years ago