Alternatives and similar repositories for woftool

Users that are interested in woftool are comparing it to the libraries listed below

• vovkos / protolesshooks
  API monitoring via return-hijacking thunks; works without information about target function prototypes.
  ☆118Updated 5 years ago
• thinkcz / pico-toolbox
  PICO processes toolbox, playground for PICO processes research
  ☆74Updated 7 years ago
• arizvisa / ndk
  A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
  ☆54Updated 5 years ago
• andrew-boyarshin / LoaderWatch
  Windows 10 PE image loader (LDR) NTDLL component toolbox
  ☆49Updated 5 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆88Updated 9 years ago
• dishather / richprint
  Print compiler information stored in Rich Header of PE executables.
  ☆140Updated last week
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆146Updated 6 years ago
• ionescu007 / r0ak
  ☆33Updated 7 years ago
• microsoft / ndis-driver-library
  Code to make it easier to write an NDIS network driver on Windows
  ☆89Updated 2 years ago
• zodiacon / RunAppContainer
  Run executables in an AppContainer
  ☆121Updated 6 years ago
• Mattiwatti / dumplib
  Import library generator for x86 PE files
  ☆59Updated 6 years ago
• neosmart / msvcrt.lib
  msvcrt.lib for linking against msvcrt.dll on all versions of Windows
  ☆86Updated 4 years ago
• zodiacon / DeviceExplorer
  ☆56Updated 4 months ago
• assarbad / msvc-undoc
  Undocumented MSVC
  ☆37Updated last year
• stolenbytes / sxshashing
  ☆18Updated 8 years ago
• Biswa96 / WslReverse
  Experiments with hidden COM interface and LxBus IPC mechanism in WSL
  ☆84Updated 3 years ago
• DownWithUp / CallMon
  CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers
  ☆144Updated 5 years ago
• mrexodia / JitMagic
  Simple tool that allows you to have multiple Just-In-Time debuggers at once.
  ☆94Updated 10 months ago
• 0vercl0k / sic
  Enumerate user mode shared memory mappings on Windows.
  ☆123Updated 4 years ago
• zodiacon / DllIconHandler
  Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install
  ☆35Updated 9 months ago
• ykfre / BsodSurvivor
  This project aims to facilitate debugging a kernel driver in windows by adding support for a code change on the fly without reboot/unload…
  ☆171Updated 2 years ago
• bi-zone / rdtsc-checkvirt-poc
  Virtualization detection through speculative execution PoCs and papers
  ☆68Updated 7 years ago
• rcx / tinyPE
  Smallest possible PE files. Artisanal, hand-crafted with love and care.
  ☆37Updated 5 years ago
• BehroozAbbassi / sdkffi
  A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.
  ☆94Updated 3 years ago
• ionescu007 / tpmtool
  The TpmTool utility is a simple cross-platform tool for accessing TPM2.0 Non-Volatile (NV) Spaces (Index Values) on compliant systems, wi…
  ☆147Updated 4 years ago
• zodiacon / JobExplorer
  Explore Job Objects on a Windows system
  ☆81Updated 6 years ago
• ytk2128 / pe32-password
  A simple password-based PE encryptor for Windows 32-bit executables.
  ☆53Updated 9 months ago
• OSRDrivers / WDF-I
  Writing WDF Drivers I: Core Concepts Lab Material
  ☆53Updated 2 years ago
• zodiacon / TotalPE
  Yet another PE Viewer
  ☆140Updated 2 years ago
• zodiacon / CPUStress
  CPU Stress v3.0
  ☆39Updated last year