Alternatives and similar repositories for COFFI

Users that are interested in COFFI are comparing it to the libraries listed below

• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆229Updated 5 years ago
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆216Updated this week
• polycone / pe-loader
  A Windows PE format file loader
  ☆147Updated 7 years ago
• rogerorr / NtTrace
  An strace-like program for the Windows 'native' API
  ☆277Updated 2 months ago
• ntoskrnl7 / crtsys
  C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL
  ☆186Updated 3 years ago
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆329Updated 5 months ago
• HoShiMin / formatPE
  A bunch of parsers for PE and PDB formats in C++
  ☆258Updated last year
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆135Updated last year
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆146Updated 6 years ago
• jovibor / libpe
  Library for parsing internal structures of PE32/PE32+ binary files.
  ☆169Updated 10 months ago
• malxau / minicrt
  A minimal C runtime for Windows instead of MSVCRT
  ☆107Updated 6 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆88Updated 9 years ago
• jnastarot / enma_pe
  Cross-platform library for parsing and building PE\PE+ formats
  ☆82Updated 3 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆105Updated 8 months ago
• zodiacon / TotalPE
  Yet another PE Viewer
  ☆144Updated 2 years ago
• BackupGGCode / portable-executable-library
  PE Bliss - Cross-Platform Portable Executable C++ Library
  ☆60Updated last year
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆230Updated last week
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆326Updated last month
• magnusstubman / dll-exports
  Collection of DLL function export forwards for DLL export function proxying
  ☆105Updated last month
• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆218Updated 4 years ago
• csandker / InterProcessCommunication-Samples
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆200Updated last year
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆145Updated 2 years ago
• nettitude / SimplePELoader
  In-Memory PE Loader
  ☆377Updated 5 years ago
• mrexodia / AppInitHook
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆180Updated 3 years ago
• zyantific / zyan-hook-engine
  Advanced x86/x86-64 hooking library (WIP).
  ☆135Updated last year
• TimMisiak / LoaderLog
  Small application that can be used to log loader snaps and other debug output
  ☆68Updated last year
• vovkos / protolesshooks
  API monitoring via return-hijacking thunks; works without information about target function prototypes.
  ☆118Updated 5 years ago
• jxy-s / stlkrn
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆426Updated 2 years ago
• TomashuTTTT7 / Hidecall
  Hide function calls to prevent reverse-engineering
  ☆72Updated 4 years ago
• zodiacon / QuickAsm
  Simple x86/x64 Assembler/Disassembler/Emulator
  ☆185Updated last year