Alternatives and similar repositories for WinDbg_Scripts:

Users that are interested in WinDbg_Scripts are comparing it to the libraries listed below

• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆410Updated 5 months ago
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆342Updated last month
• 0vercl0k / windbg-scripts
  A bunch of JavaScript extensions for WinDbg.
  ☆331Updated 4 months ago
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆136Updated 2 years ago
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆577Updated 9 months ago
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆226Updated 8 months ago
• Fyyre / DrvMon
  Advanced driver monitoring utility.
  ☆207Updated 2 years ago
• ayoubfaouzi / windows-internals
  My notes while studying Windows internals
  ☆418Updated 3 months ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆395Updated 3 years ago
• horsicq / xntsv
  XNTSV program for detailed viewing of system structures for Windows.
  ☆457Updated this week
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆198Updated last month
• zodiacon / windowskernelprogrammingbook2e
  Samples for the book Windows Kernel Programming, 2nd edition
  ☆327Updated 3 months ago
• TimMisiak / WinDbgCookbook
  This is a repo for small, useful scripts and extensions
  ☆244Updated last year
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆437Updated 5 years ago
• trailofbits / RpcInvestigator
  Exploring RPC interfaces on Windows
  ☆320Updated last year
• commial / ttd-bindings
  Bindings for Microsoft WinDBG TTD
  ☆218Updated last year
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆151Updated last year
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆595Updated 7 years ago
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆466Updated 5 months ago
• ergrelet / windiff
  Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …
  ☆335Updated this week
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆719Updated 5 months ago
• VoidSec / DriverBuddyReloaded
  Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
  ☆347Updated 5 months ago
• gerhart01 / Hyper-V-Internals
  Internals information about Hyper-V
  ☆689Updated 2 months ago
• gdabah / win32k-bugs
  Dump of win32k POCs for bugs I've found
  ☆371Updated 3 years ago
• ElliotKillick / operating-system-design-review
  Operating System Design Review: A systemic analysis of modern systems architecture
  ☆306Updated last month
• repnz / apc-research
  APC Internals Research Code
  ☆162Updated 4 years ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆285Updated 5 years ago
• br-sn / CheekyBlinder
  Enumerating and removing kernel callbacks using signed vulnerable drivers
  ☆556Updated 2 years ago
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆225Updated 2 years ago
• hugsy / CFB
  Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.
  ☆317Updated last year