Alternatives and similar repositories for woftool

Users that are interested in woftool are comparing it to the libraries listed below

• thinkcz / pico-toolbox
  PICO processes toolbox, playground for PICO processes research
  ☆74Updated 7 years ago
• arizvisa / ndk
  A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
  ☆54Updated 6 years ago
• vovkos / protolesshooks
  API monitoring via return-hijacking thunks; works without information about target function prototypes.
  ☆118Updated 5 years ago
• ykfre / BsodSurvivor
  This project aims to facilitate debugging a kernel driver in windows by adding support for a code change on the fly without reboot/unload…
  ☆171Updated 2 years ago
• 0vercl0k / sic
  Enumerate user mode shared memory mappings on Windows.
  ☆125Updated 4 years ago
• neosmart / msvcrt.lib
  msvcrt.lib for linking against msvcrt.dll on all versions of Windows
  ☆87Updated 4 years ago
• ionescu007 / r0ak
  ☆34Updated 7 years ago
• mrexodia / JitMagic
  Simple tool that allows you to have multiple Just-In-Time debuggers at once.
  ☆94Updated 10 months ago
• DownWithUp / CallMon
  CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers
  ☆144Updated 5 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆89Updated 9 years ago
• andrew-boyarshin / LoaderWatch
  Windows 10 PE image loader (LDR) NTDLL component toolbox
  ☆49Updated 6 years ago
• Biswa96 / WslReverse
  Experiments with hidden COM interface and LxBus IPC mechanism in WSL
  ☆84Updated 3 years ago
• AndreyBazhan / DbgPkg
  Scripts to prepare Windows system for debugging.
  ☆31Updated 4 years ago
• ntdiff / ntdiff
  ☆131Updated last year
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆180Updated 3 years ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆146Updated 6 years ago
• zodiacon / RunAppContainer
  Run executables in an AppContainer
  ☆122Updated 6 years ago
• dishather / richprint
  Print compiler information stored in Rich Header of PE executables.
  ☆144Updated last week
• coderforlife / ms-compress
  Open source implementations of Microsoft compression algorithms
  ☆217Updated 5 years ago
• zodiacon / DllIconHandler
  Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install
  ☆35Updated 10 months ago
• bi-zone / rdtsc-checkvirt-poc
  Virtualization detection through speculative execution PoCs and papers
  ☆68Updated 7 years ago
• hfiref0x / ROCALL
  ReactOS x86-32 syscall fuzzer
  ☆58Updated 3 months ago
• stolenbytes / sxshashing
  ☆18Updated 8 years ago
• zodiacon / JobExplorer
  Explore Job Objects on a Windows system
  ☆82Updated 6 years ago
• BehroozAbbassi / sdkffi
  A code parser for C-Style header files that lets you to parse function's prototypes and data types used in their parameters.
  ☆94Updated 3 years ago
• horsicq / Formats
  Binary formats
  ☆29Updated this week
• zodiacon / PoolMonXv2
  Kernel Pool Monitor
  ☆127Updated 3 years ago
• OSRDrivers / WDF-I
  Writing WDF Drivers I: Core Concepts Lab Material
  ☆53Updated 2 years ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆144Updated 6 years ago
• assarbad / msvc-undoc
  Undocumented MSVC
  ☆38Updated last year