rogerorr / NtTrace
An strace-like program for the Windows 'native' API
☆263Updated last week
Alternatives and similar repositories for NtTrace:
Users that are interested in NtTrace are comparing it to the libraries listed below
- C++ Exceptions in Windows Drivers☆207Updated 4 years ago
- A modern c++ implementation of windows heavens gate☆217Updated 4 years ago
- A header-only C++ library for accessing files in COFF binary format. (Including Windows PE/PE+ formats)☆195Updated last month
- open source process monitor☆265Updated last year
- COFF and Portable Executable format described using standard C++ with no dependencies.☆278Updated last month
- Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.☆312Updated 2 months ago
- A Windows PE format file loader☆141Updated 6 years ago
- PDB Downloader - An easier way to download Microsoft's public symbols for Libraries and Executables.☆298Updated 9 years ago
- A bunch of parsers for PE and PDB formats in C++☆238Updated 11 months ago
- A DTrace on Windows Reimplementation☆343Updated 2 months ago
- Collection of undocumented Windows API declarations.☆308Updated 2 weeks ago
- Research on Windows Kernel Executive Callback Objects☆286Updated 5 years ago
- Detours with just single dependency - NTDLL☆629Updated 2 years ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆199Updated 9 months ago
- A wrapper library around native windows sytem APIs☆432Updated 4 years ago
- C++ STL in the Windows Kernel with C++ Exception Support☆407Updated last year
- An IDA Plugin that help analyzing module that use COM☆208Updated last year
- My personal cheat sheet for using WinDbg for kernel debugging☆413Updated 6 months ago
- The history of Windows Internals via symbols.☆176Updated 3 years ago
- Windows NT x64 syscall fuzzer☆602Updated last year
- A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.☆202Updated 4 months ago
- Source code for File Test - Interactive File System Test Tool☆282Updated 3 weeks ago
- Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…☆169Updated 3 years ago
- Hex-Rays microcode plugin for automated simplification of Windows Kernel decompilation.☆588Updated 2 months ago
- XNTSV program for detailed viewing of system structures for Windows.☆459Updated this week
- A bunch of JavaScript extensions for WinDbg.☆335Updated 4 months ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆95Updated 2 months ago
- Native API online documentation, based on the System Informer (formerly Process Hacker) phnt headers☆248Updated this week
- This is a collection of interesting codes about Windows Process creation.☆232Updated last year
- Toy scripts for playing with WinDbg JS API☆227Updated 9 months ago