tpn / windows-nt-file-system-internals-bookLinks
Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.
☆16Updated 5 years ago
Alternatives and similar repositories for windows-nt-file-system-internals-book
Users that are interested in windows-nt-file-system-internals-book are comparing it to the libraries listed below
Sorting:
- ☆20Updated 5 years ago
- A set of small utilities, helpers for PIN tracers☆33Updated last year
- ☆21Updated 4 years ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆60Updated 10 months ago
- Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode☆19Updated last year
- Slides from various conference talks☆37Updated 2 years ago
- DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10☆53Updated last year
- ☆25Updated 2 years ago
- Neutralize KEPServerEX anti-debugging techniques☆32Updated 2 years ago
- WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs☆18Updated last year
- Miscellaneous Code and Docs☆81Updated last year
- ☆28Updated 7 months ago
- A ready-made template for a project based on libpeconv.☆48Updated 4 months ago
- Code Integrity Violation Spotter☆16Updated last year
- ☆22Updated 6 years ago
- allowing um r/w through km from um ioctl ™☆11Updated 3 years ago
- Full reversing of the Microsoft Auxiliary Windows API Library and ported to C☆24Updated 6 months ago
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- Support Windows OS Reversing by searching easily for references to functions across many DLLs☆34Updated 3 years ago
- ☆17Updated 6 years ago
- penter hook example and driver time recorder☆31Updated 7 years ago
- Demonstrate the new FileDispositionInfoEx behavior☆14Updated 7 years ago
- An API Monitor based on Instrumentation☆43Updated 7 years ago
- Headers for linking your software with ntdll.dll☆15Updated 4 years ago
- ☆22Updated 4 years ago
- Runtime smm module loader☆33Updated 2 years ago
- Demos and presentation from SECArmy Village Grayhat 2020☆38Updated 2 years ago
- This is a simple tool to dump all the reparse points on an NTFS volume.☆33Updated 4 years ago
- Python 3 - Manipulation and conversation with different data type (Bytes operations)☆26Updated 3 years ago