Alternatives and similar repositories for practical_reverse_engineering

Users that are interested in practical_reverse_engineering are comparing it to the libraries listed below

• hasherezade / pe_utils
  A set of small utilities, helpers for PIN tracers
  ☆32Updated last year
• thalium / WinDbgFastObj
  ☆21Updated 4 years ago
• SinaKarvandi / Pinitor
  An API Monitor based on Instrumentation
  ☆43Updated 7 years ago
• hasherezade / beardisasm
  A wrapper for capstone for bearparser
  ☆14Updated 2 years ago
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• NtRaiseHardError / NoREpls
  NoREpls - Application designed for the purposes of reverse engineering.
  ☆11Updated 6 years ago
• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆15Updated last year
• therealdreg / Win.Cerdalux
  WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs
  ☆18Updated last year
• JKornev / cfgdump
  Windbg extension that allows you analyze Control Flow Guard map
  ☆36Updated 3 years ago
• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆53Updated last year
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆33Updated 5 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆29Updated 8 years ago
• lieff / dynobj
  Dynamic COFF object loader
  ☆23Updated 7 years ago
• h4xu3lyn / NTLib
  Headers for linking your software with ntdll.dll
  ☆15Updated 4 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• 86hh / BEAUTIFULSKY
  ☆21Updated 6 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆37Updated 6 years ago
• killswitch-GUI / IsDebuggerPresent
  Debugger checks in 3 ways
  ☆20Updated 7 years ago
• nimrodpar / Obfvious
  ☆14Updated 4 years ago
• Jb05s / Exploit-Dev-C
  ☆22Updated 5 years ago
• therealdreg / auxlib
  Full reversing of the Microsoft Auxiliary Windows API Library and ported to C
  ☆24Updated 7 months ago
• OSRDrivers / WDF-I
  Writing WDF Drivers I: Core Concepts Lab Material
  ☆53Updated 2 years ago
• Broihon / SetDebugPrivilege
  ☆10Updated 4 years ago
• d35ha / xPE
  Simple library to handle PE files loading, relocating, get/set data, ..., in addition to process handling
  ☆32Updated 5 years ago
• SouhailHammou / Custom-VM
  Virtual machine with a custom instruction set in C
  ☆16Updated 7 years ago
• zodiacon / ObjDir
  Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.
  ☆20Updated last year
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆16Updated last year
• tpn / windows-nt-file-system-internals-book
  Source code on the 1.44MB 3.5 floppy accompanying the Windows NT File System Internals book.
  ☆17Updated 5 years ago
• roadwy / Record
  ☆16Updated 11 years ago
• williballenthin / siglib
  function identification signatures
  ☆12Updated 4 years ago