Alternatives and similar repositories for Windows-Internals

Users that are interested in Windows-Internals are comparing it to the libraries listed below

• therealdreg / pdbdump_bochs
  Dump PDB Symbols including support for Bochs Debugging Format (with wine support)
  ☆15Updated last year
• JKornev / NTlib
  Static library and headers for linking your software with ntdll.dll
  ☆32Updated 5 years ago
• namazso / msvcrt.lib
  .lib file for linking against the NT CRT
  ☆19Updated 3 years ago
• adrianyy / nasm_shellcode
  NASM listing to shellcode converter
  ☆12Updated 7 years ago
• Peribunt / Wow64-HeavensGate
  Basic utilities for executing, reading and writing 64-bit data in a 32-bit WoW64 process
  ☆17Updated 2 years ago
• EngineOwningSoftware / HWBRK
  Windows x86 Hardware Breakpoint class for Windows >Vista
  ☆22Updated 8 years ago
• KelvinMsft / TechMyths
  ☆17Updated 2 years ago
• meme / VTIL-DemoCompiler
  A demo AsmJit-based VTIL amd64 compiler.
  ☆12Updated 4 years ago
• crtdll / ppc-vm
  PowerPC (64bit) virtual machine with support for ram, stack, syscalls, and threading. WIP
  ☆2Updated 4 years ago
• alexvogt91 / NativeFileCompressor
  Native file compressor using only the ntdll.dll
  ☆9Updated 7 years ago
• h4xu3lyn / NTLib
  Headers for linking your software with ntdll.dll
  ☆15Updated 4 years ago
• gabriellandau / CISpotter
  Code Integrity Violation Spotter
  ☆16Updated last year
• Zero-Tang / SimpleWhpDemo
  Simple Demo of using Windows Hypervisor Platform
  ☆27Updated 4 months ago
• mrexodia / regstep
  Simple x64dbg plugin to show registers on every step.
  ☆16Updated 5 years ago
• xenocidewiki / riscv-disasm
  RISC-V Disassembler
  ☆18Updated 4 years ago
• nimrodpar / Obfvious
  ☆14Updated 4 years ago
• vlmillet / Phantom.JIT
  Phantom.Code extension providing Just-In-Time asm x64 compilation based on LLVM
  ☆8Updated 2 years ago
• therealdreg / symseghelper
  Helper scripts for windows debugging with symbols for Bochs and IDA Pro (PDB files). Very handy for user mode <--> kernel mode
  ☆19Updated last year
• stonedreamforest / Tstl
  The kernel mode Standard Template Library Template
  ☆18Updated 5 years ago
• blaquee / APCHook
  hooking KiUserApcDispatcher
  ☆24Updated 8 years ago
• Chuyu-Team / woflib
  An open source library for operating the Windows Overlay Filter driver.
  ☆22Updated 6 years ago
• SouhailHammou / Custom-VM
  Virtual machine with a custom instruction set in C
  ☆16Updated 6 years ago
• kanren3 / efiutil
  Based on nt5src
  ☆15Updated last year
• yisonPylkita / powershell_cpp
  PowerShell interpreter for unmanaged (non CLI) C++ projects
  ☆16Updated 7 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆34Updated 6 years ago
• ObstreperousMadcap / villainius--procedural
  A benign application used to demonstrate an EDR detection. This version is procedural (i.e., not object-oriented).
  ☆1Updated 2 years ago
• eyalfishler / CrystalCPUID
  use crystalCPUID to identify vt-x & amd-v
  ☆17Updated 10 years ago
• jnastarot / fukutasm
  (shard of furikuri project) assambler for code obfuscation
  ☆18Updated 5 years ago
• bb107 / ServiceCall
  Interprocess communication library, providing the ability to call functions from each other
  ☆20Updated 5 years ago
• ExpLife0011 / WinFaults
  A small header file mapping status codes passed to KiExceptionDispatch before KiPreprocessFault to individual CPU faults.
  ☆13Updated 6 years ago