rogerorr / NtTrace
An strace-like program for the Windows 'native' API
☆200Updated last month
Alternatives and similar repositories for NtTrace:
Users that are interested in NtTrace are comparing it to the libraries listed below
- C++ Exceptions in Windows Drivers☆203Updated 4 years ago
- open source process monitor☆261Updated last year
- The history of Windows Internals via symbols.☆177Updated 3 years ago
- Libraries for extending WinDbg and its underlying components.☆109Updated last month
- A header-only C++ library for accessing files in COFF binary format. (Including Windows PE/PE+ formats)☆190Updated 2 months ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆195Updated 6 months ago
- Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.☆296Updated 4 months ago
- PICO processes toolbox, playground for PICO processes research☆72Updated 7 years ago
- A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.☆199Updated last month
- COFF and Portable Executable format described using standard C++ with no dependencies.☆267Updated 2 weeks ago
- CMake module for building drivers with Windows Development Kit (WDK)☆263Updated 4 months ago
- Detours with just single dependency - NTDLL☆617Updated 2 years ago
- A Windows API hooking library☆192Updated 2 years ago
- Win32 Console Documentation -- in particular, console/standard handles and CreateProcess inheritance☆111Updated 8 months ago
- Toy scripts for playing with WinDbg JS API☆221Updated 6 months ago
- Library for parsing internal structures of PE32/PE32+ binary files.☆162Updated last month
- My personal cheat sheet for using WinDbg for kernel debugging☆395Updated 3 months ago
- pdbex is a utility for reconstructing structures and unions from the PDB into compilable C headers☆833Updated 4 months ago
- A parser for Microsoft PDB (Program Database) debugging information☆405Updated last month
- A modern c++ implementation of windows heavens gate☆202Updated 4 years ago
- API monitoring via return-hijacking thunks; works without information about target function prototypes.☆114Updated 4 years ago
- PDB Downloader - An easier way to download Microsoft's public symbols for Libraries and Executables.☆294Updated 8 years ago
- Windows NT x64 syscall fuzzer☆596Updated last year
- Translates WinDbg "dt" structure dump to a C structure☆127Updated 8 years ago
- An IDA Plugin that help analyzing module that use COM☆200Updated last year
- A bunch of JavaScript extensions for WinDbg.☆325Updated last month
- A bunch of parsers for PE and PDB formats in C++☆230Updated 8 months ago
- A Windows PE format file loader☆138Updated 6 years ago
- Yet another PE Viewer☆137Updated 2 years ago