rogerorr / NtTrace
An strace-like program for the Windows 'native' API
☆195Updated last week
Related projects: ⓘ
- C++ Exceptions in Windows Drivers☆195Updated 3 years ago
- A header-only C++ library for accessing files in COFF binary format. (Including Windows PE/PE+ formats)☆182Updated 8 months ago
- A Windows PE format file loader☆137Updated 6 years ago
- ☆186Updated this week
- API monitoring via return-hijacking thunks; works without information about target function prototypes.☆112Updated 4 years ago
- Source code for File Test - Interactive File System Test Tool☆255Updated 3 months ago
- A bunch of parsers for PE and PDB formats in C++☆220Updated 4 months ago
- A modern c++ implementation of windows heavens gate☆193Updated 4 years ago
- The history of Windows Internals via symbols.☆175Updated 2 years ago
- Detours with just single dependency - NTDLL☆596Updated 2 years ago
- Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.☆281Updated 3 weeks ago
- PICO processes toolbox, playground for PICO processes research☆67Updated 6 years ago
- ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h☆128Updated 5 years ago
- A Windows API hooking library☆189Updated 2 years ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆193Updated 2 months ago
- COFF and Portable Executable format described using standard C++ with no dependencies.☆251Updated 5 months ago
- open source process monitor☆249Updated 9 months ago
- Print compiler information stored in Rich Header of PE executables.☆122Updated last week
- A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.☆193Updated 6 months ago
- Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…☆156Updated 2 years ago
- PDB Downloader - An easier way to download Microsoft's public symbols for Libraries and Executables.☆292Updated 8 years ago
- An IDA Plugin that help analyzing module that use COM☆198Updated last year
- The ultimate hooking library☆253Updated 3 years ago
- CMake module for building drivers with Windows Development Kit (WDK)☆247Updated last week
- awesome windbg extensions☆306Updated 5 years ago
- Yet another PE Viewer☆137Updated last year
- Kernel Pool Monitor☆118Updated 2 years ago
- A bunch of JavaScript extensions for WinDbg.☆310Updated 2 years ago
- This project aims to facilitate debugging a kernel driver in windows by adding support for a code change on the fly without reboot/unload…☆167Updated last year
- An example of a client and server using Windows' ALPC functions to send and receive data.☆88Updated 4 years ago