Alternatives and similar repositories for COFFI

Users that are interested in COFFI are comparing it to the libraries listed below

• JustasMasiulis / wow64pp
  A modern c++ implementation of windows heavens gate
  ☆222Updated 4 years ago
• 0vercl0k / udmp-parser
  A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.
  ☆204Updated 6 months ago
• MiroKaku / Musa.Veil
  Collection of undocumented Windows API declarations.
  ☆314Updated this week
• polycone / pe-loader
  A Windows PE format file loader
  ☆145Updated 7 years ago
• rogerorr / NtTrace
  An strace-like program for the Windows 'native' API
  ☆265Updated 3 weeks ago
• can1357 / linux-pe
  COFF and Portable Executable format described using standard C++ with no dependencies.
  ☆283Updated last month
• HoShiMin / formatPE
  A bunch of parsers for PE and PDB formats in C++
  ☆246Updated last year
• avakar / vcrtl
  C++ Exceptions in Windows Drivers
  ☆209Updated 4 years ago
• ajkhoury / ApiSet
  API Set resolver for Windows
  ☆133Updated 8 months ago
• ntoskrnl7 / crtsys
  C/C++ Runtime library for system file (Windows Kernel Driver) - Supports Microsoft STL
  ☆184Updated 2 years ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆139Updated 5 years ago
• jxy-s / stlkrn
  C++ STL in the Windows Kernel with C++ Exception Support
  ☆412Updated last year
• csandker / InterProcessCommunication-Samples
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆175Updated last year
• jovibor / libpe
  Library for parsing internal structures of PE32/PE32+ binary files.
  ☆167Updated 5 months ago
• 0vercl0k / kdmp-parser
  A Windows kernel dump C++ parser library with Python 3 bindings.
  ☆199Updated 10 months ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆87Updated 9 years ago
• mrexodia / phnt-single-header
  Single header version of System Informer's phnt library.
  ☆221Updated last week
• JustasMasiulis / inline_syscall
  Inline syscalls made easy for windows on clang
  ☆706Updated 11 months ago
• 3gstudent / Inject-dll-by-APC
  Asynchronous Procedure Calls
  ☆230Updated 4 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆96Updated 4 months ago
• zyantific / zasm
  x86-64 Assembler based on Zydis
  ☆360Updated 3 months ago
• repnz / apc-research
  APC Internals Research Code
  ☆166Updated 4 years ago
• malxau / minicrt
  A minimal C runtime for Windows instead of MSVCRT
  ☆103Updated 5 years ago
• nettitude / SimplePELoader
  In-Memory PE Loader
  ☆376Updated 5 years ago
• zodiacon / TotalPE2
  PE Viewer
  ☆181Updated 4 months ago
• magnusstubman / dll-exports
  Collection of DLL function export forwards for DLL export function proxying
  ☆97Updated last year
• JustasMasiulis / nt_wrapper
  A wrapper library around native windows sytem APIs
  ☆433Updated 4 years ago
• zyantific / zyan-hook-engine
  Advanced x86/x86-64 hooking library (WIP).
  ☆129Updated last year
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆286Updated 5 years ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆406Updated 4 years ago