Alternatives and similar repositories for woftool

Users that are interested in woftool are comparing it to the libraries listed below

• thinkcz / pico-toolbox
  PICO processes toolbox, playground for PICO processes research
  ☆72Updated 8 years ago
• vovkos / protolesshooks
  API monitoring via return-hijacking thunks; works without information about target function prototypes.
  ☆117Updated 5 years ago
• Biswa96 / WslReverse
  Experiments with hidden COM interface and LxBus IPC mechanism in WSL
  ☆84Updated 3 years ago
• arizvisa / ndk
  A local copy of Alex Ionescu's seemingly abandoned native-nt-toolkit project containing knowledge inherited from the ReactOS project.
  ☆54Updated 6 years ago
• andrew-boyarshin / LoaderWatch
  Windows 10 PE image loader (LDR) NTDLL component toolbox
  ☆49Updated 6 years ago
• 0vercl0k / sic
  Enumerate user mode shared memory mappings on Windows.
  ☆125Updated 4 years ago
• ykfre / BsodSurvivor
  This project aims to facilitate debugging a kernel driver in windows by adding support for a code change on the fly without reboot/unload…
  ☆170Updated 2 years ago
• DownWithUp / CallMon
  CallMon is an experimental system call monitoring tool that works on Windows 10 versions 2004+ using PsAltSystemCallHandlers
  ☆144Updated 5 years ago
• yardenshafir / IoRing_Demos
  A repository for I/O ring demos, use cases and performance testing on Windows
  ☆59Updated 3 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆89Updated 10 years ago
• zodiacon / PoolMonXv2
  Kernel Pool Monitor
  ☆127Updated 3 years ago
• zodiacon / RunAppContainer
  Run executables in an AppContainer
  ☆122Updated 6 years ago
• OSRDrivers / WDF-I
  Writing WDF Drivers I: Core Concepts Lab Material
  ☆53Updated 2 years ago
• ionescu007 / tpmtool
  The TpmTool utility is a simple cross-platform tool for accessing TPM2.0 Non-Volatile (NV) Spaces (Index Values) on compliant systems, wi…
  ☆147Updated 4 years ago
• ionescu007 / r0ak
  ☆34Updated 7 years ago
• zodiacon / NativeApps
  Demos and presentation from SECArmy Village Grayhat 2020
  ☆37Updated 2 years ago
• Mattiwatti / WinMain-is-usually-a-function
  Windows NT port of 'Main is usually a function. So then when is it not?'
  ☆27Updated last year
• Masfo / TinyPE
  POC Tiny PE - Example project showing (almost) minimal executable size. Without touching assembly.
  ☆15Updated 3 weeks ago
• neosmart / msvcrt.lib
  msvcrt.lib for linking against msvcrt.dll on all versions of Windows
  ☆87Updated 5 years ago
• stolenbytes / sxshashing
  ☆18Updated 8 years ago
• microsoft / ndis-driver-library
  Code to make it easier to write an NDIS network driver on Windows
  ☆91Updated 2 years ago
• zodiacon / JobExplorer
  Explore Job Objects on a Windows system
  ☆82Updated 6 years ago
• zodiacon / DllIconHandler
  Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install
  ☆36Updated 11 months ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆148Updated 6 years ago
• ytk2128 / pe32-password
  A simple password-based PE encryptor for Windows 32-bit executables.
  ☆50Updated 11 months ago
• repnz / windows-inspector
  A driver to intercept low level windows events
  ☆63Updated 6 years ago
• mrexodia / JitMagic
  Simple tool that allows you to have multiple Just-In-Time debuggers at once.
  ☆95Updated last year
• yardenshafir / DpcWait
  Driver demonstrating how to register a DPC to asynchronously wait on an object
  ☆50Updated 4 years ago
• AndreyBazhan / SymStore
  The history of Windows Internals via symbols.
  ☆180Updated 4 years ago
• assarbad / msvc-undoc
  Undocumented MSVC
  ☆38Updated last month