Alternatives and similar repositories for COFFI:

Users that are interested in COFFI are comparing it to the libraries listed below

• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆215Updated 4 years ago
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆200Updated 3 months ago
• rogerorr / NtTrace
  An strace-like program for the Windows 'native' API
  ☆249Updated last month
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆274Updated last month
• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆204Updated 4 years ago
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆302Updated last month
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆190Updated last week
• HoShiMin / formatPE
  A bunch of parsers for PE and PDB formats in C++
  ☆231Updated 9 months ago
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆128Updated 5 months ago
• zyantific / zasm
  x86-64 Assembler based on Zydis
  ☆343Updated last month
• JustasMasiulis / inline_syscall
  Inline syscalls made easy for windows on clang
  ☆692Updated 8 months ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆134Updated 5 years ago
• ntoskrnl7 / crtsys
  C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL
  ☆185Updated 2 years ago
• polycone / pe-loader
  A Windows PE format file loader
  ☆140Updated 6 years ago
• jxy-s / stlkrn
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆402Updated last year
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆85Updated 9 years ago
• kkent030315 / anycall
  x64 Windows kernel code execution via user-mode, arbitrary syscall, vulnerable IOCTLs demonstration
  ☆265Updated 2 years ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆284Updated 4 years ago
• mrexodia / AppInitHook
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆167Updated 2 years ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆389Updated 3 years ago
• repnz / apc-research
  APC Internals Research Code
  ☆161Updated 4 years ago
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆196Updated 7 months ago
• jovibor / libpe
  Library for parsing internal structures of PE32/PE32+ binary files.
  ☆162Updated 2 months ago
• JustasMasiulis / nt_wrapper
  A wrapper library around native windows sytem APIs
  ☆427Updated 4 years ago
• zyantific / zyan-hook-engine
  Advanced x86/x86-64 hooking library (WIP).
  ☆127Updated last year
• connorjaydunn / BinaryShield
  An x86-64 Code Virtualizer
  ☆231Updated 4 months ago
• malxau / minicrt
  A minimal C runtime for Windows instead of MSVCRT
  ☆98Updated 5 years ago
• MiroKaku / ucxxrt
  The Universal C++ RunTime library, supporting kernel-mode C++ exception-handler and STL.
  ☆400Updated 7 months ago
• d35ha / xObf
  Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine
  ☆263Updated 2 years ago
• 0xcpu / WinAltSyscallHandler
  Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999
  ☆209Updated 5 years ago