Alternatives and similar repositories for COFFI

Users that are interested in COFFI are comparing it to the libraries listed below

• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆225Updated 4 years ago
• rogerorr / NtTrace
  An strace-like program for the Windows 'native' API
  ☆268Updated 2 months ago
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆204Updated 7 months ago
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆320Updated 2 months ago
• polycone / pe-loader
  A Windows PE format file loader
  ☆145Updated 7 years ago
• HoShiMin / formatPE
  A bunch of parsers for PE and PDB formats in C++
  ☆251Updated last year
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆135Updated 10 months ago
• ntoskrnl7 / crtsys
  C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL
  ☆185Updated 2 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆87Updated 9 years ago
• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆212Updated 4 years ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆142Updated 6 years ago
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆224Updated last week
• jovibor / libpe
  Library for parsing internal structures of PE32/PE32+ binary files.
  ☆167Updated 7 months ago
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆318Updated last month
• malxau / minicrt
  A minimal C runtime for Windows instead of MSVCRT
  ☆104Updated 6 years ago
• jnastarot / enma_pe
  Cross-platform library for parsing and building PE\PE+ formats
  ☆81Updated 2 years ago
• vovkos / protolesshooks
  API monitoring via return-hijacking thunks; works without information about target function prototypes.
  ☆118Updated 5 years ago
• zyantific / zasm
  x86-64 Assembler based on Zydis
  ☆369Updated 4 months ago
• mrexodia / AppInitHook
  Global user-mode hooking framework, based on AppInit_DLLs. The goal is to allow you to rapidly develop hooks to inject in an arbitrary pr…
  ☆172Updated 3 years ago
• zyantific / zycore-c
  Internal library providing platform independent types, macros and a fallback for environments without LibC.
  ☆104Updated last month
• csandker / InterProcessCommunication-Samples
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆178Updated last year
• jxy-s / stlkrn
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆417Updated last year
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆202Updated last year
• zyantific / zyan-hook-engine
  Advanced x86/x86-64 hooking library (WIP).
  ☆132Updated last year
• adamhlt / Manual-DLL-Loader
  Custom LoadLibrary / GetProcAddress (x86 / x64) - Load DLL and retrieve functions manually
  ☆93Updated last year
• d35ha / xObf
  Simple x86/x86_64 instruction level obfuscator based on a basic SBI engine
  ☆273Updated 2 years ago
• repnz / apc-research
  APC Internals Research Code
  ☆166Updated 5 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆97Updated 5 months ago
• TomashuTTTT7 / Hidecall
  Hide function calls to prevent reverse-engineering
  ☆71Updated 4 years ago
• DymOK93 / KTL
  Kernel Template Library: STL-style containers and tools for Windows kernel space programming
  ☆96Updated 2 years ago