Alternatives and similar repositories for winapi-json:

Users that are interested in winapi-json are comparing it to the libraries listed below

• SouhailHammou / KernelSymbolsHelper
  Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…
  ☆54Updated 5 years ago
• benoitsevens / applying-ttd-to-malware-analysis
  Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019
  ☆40Updated 5 years ago
• RolfRolles / IDBs
  Analyses in IDA/Hex-Rays
  ☆81Updated 2 years ago
• changeofpace / PE-Header-Dump-Utilities
  This x64dbg plugin adds several commands for dumping PE header information by address.
  ☆62Updated 7 years ago
• BreakingMalwareResearch / CFGExceptions
  Adding exceptions to Microsoft's Control Flow Guard (CFG)
  ☆58Updated 8 years ago
• danielplohmann / empty_msvc
  A collection of empty MSVC projects, compiled using various versions and configurations of Visual Studio.
  ☆32Updated 10 months ago
• RolfRolles / FinSpyVM
  Static unpacker for FinSpy VM
  ☆100Updated 3 years ago
• mrexodia / YaraGen
  Plugin for x64dbg to generate Yara rules from function basic blocks.
  ☆36Updated 7 years ago
• SinaKarvandi / windbg2ida
  Windbg2ida lets you dump each step in Windbg then shows these steps in IDA
  ☆75Updated 9 months ago
• saweol / vwaad
  IDA script for vmprotect Windows Api address decoder
  ☆51Updated 3 years ago
• mr-tz / idapython
  IDAPython scripts
  ☆15Updated 7 years ago
• Winbagility / Winbagility
  [ARCHIVED] mov rax, ${Thalium/IceBox}; jmp rax;
  ☆73Updated 5 years ago
• georgenicolaou / HeavenInjector
  Simple proof of concept code for injecting libraries on 64bit processes from a 32bit process
  ☆94Updated 6 years ago
• Cr4sh / PTBypass-PoC
  Bypassing code hooks detection in modern anti-rootkits via building faked PTE entries.
  ☆75Updated 14 years ago
• t3ssellate / unmapper
  An automatic tool for fixing dumped PE files
  ☆41Updated 4 years ago
• crappycrypto / wincrypto
  Windows Crypto API compatible decryption/encryption for python
  ☆47Updated 2 years ago
• dcdelia / sniper
  Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)
  ☆24Updated 3 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Updated 4 years ago
• RichHeaderResearch / RichPE
  Metadata hash incorporating the Rich Header for robustness against packing and other malware tricks
  ☆64Updated 3 years ago
• Fyyre / directntapi
  DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
  ☆52Updated last year
• thalium / idatag
  IDA plugin to explore and browse tags
  ☆54Updated 5 years ago
• RceNinja / Re-Scripts
  ☆33Updated 3 years ago
• shamrockhoax / mazedecoder
  ☆28Updated 4 years ago
• d35ha / xLogger
  Simple windows API logger
  ☆101Updated 5 years ago
• shareef12 / libpdb
  Parser for Microsoft Program Database (PDB) files
  ☆75Updated 4 years ago
• idiom / stackstack
  ☆31Updated 3 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆82Updated 4 years ago
• Cr4sh / IDA-VMware-GDB
  Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub
  ☆77Updated 12 years ago
• SouhailHammou / IDARay-Plugin
  IDARay is an IDA Pro plugin that matches the database against multiple YARA files which themselves may contain multiple rules.
  ☆18Updated 6 years ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆140Updated 6 years ago