Alternatives and similar repositories for WinDbg_Scripts:

Users that are interested in WinDbg_Scripts are comparing it to the libraries listed below

• repnz / windbg-cheat-sheet
  My personal cheat sheet for using WinDbg for kernel debugging
  ☆395Updated 3 months ago
• mandiant / STrace
  A DTrace on Windows Reimplementation
  ☆337Updated 2 months ago
• ayoubfaouzi / windows-internals
  My notes while studying Windows internals
  ☆407Updated last month
• commial / experiments
  Expriments
  ☆455Updated 3 months ago
• TimMisiak / WinDbgCookbook
  This is a repo for small, useful scripts and extensions
  ☆242Updated last year
• zodiacon / EtwExplorer
  View ETW Provider manifest
  ☆447Updated 2 months ago
• ElliotKillick / windows-vs-linux-loader-architecture
  Side-by-side comparison of the Windows and Linux (GNU) Loaders
  ☆295Updated 4 months ago
• horsicq / xntsv
  XNTSV program for detailed viewing of system structures for Windows.
  ☆448Updated this week
• airbus-cert / ttddbg
  Time Travel Debugging IDA plugin
  ☆559Updated 6 months ago
• Cr4sh / KernelForge
  A library to develop kernel level Windows payloads for post HVCI era
  ☆380Updated 3 years ago
• trailofbits / RpcInvestigator
  Exploring RPC interfaces on Windows
  ☆312Updated 11 months ago
• hugsy / windbg_js_scripts
  Toy scripts for playing with WinDbg JS API
  ☆221Updated 6 months ago
• 0vercl0k / windbg-scripts
  A bunch of JavaScript extensions for WinDbg.
  ☆325Updated last month
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆433Updated 4 years ago
• hasherezade / process_overwriting
  Yet another variant of Process Hollowing
  ☆356Updated 10 months ago
• hugsy / CFB
  Canadian Furious Beaver is a ProcMon-style tool designed only for capturing IRPs sent to any Windows driver.
  ☆312Updated 9 months ago
• br-sn / CheekyBlinder
  Enumerating and removing kernel callbacks using signed vulnerable drivers
  ☆551Updated last year
• commial / ttd-bindings
  Bindings for Microsoft WinDBG TTD
  ☆217Updated last year
• rajiv2790 / FalconEye
  ☆291Updated 3 years ago
• gerhart01 / Hyper-V-Internals
  Internals information about Hyper-V
  ☆682Updated 2 weeks ago
• pathtofile / Sealighter
  Sysmon-Like research tool for ETW
  ☆349Updated 2 years ago
• ergrelet / windiff
  Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the …
  ☆331Updated this week
• sam-b / windows_kernel_address_leaks
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆585Updated 7 years ago
• csandker / InterProcessCommunication-Samples
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆163Updated 10 months ago
• Sentinel-One / peafl64
  Static Binary Instrumentation tool for Windows x64 executables
  ☆193Updated 2 months ago
• 0xcpu / ExecutiveCallbackObjects
  Research on Windows Kernel Executive Callback Objects
  ☆282Updated 4 years ago
• yardenshafir / PoolViewer
  An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.
  ☆134Updated last year
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆712Updated 2 months ago
• alexander-hanel / msdocsviewer
  msdocsviewer is a simple tool that parses Microsoft's win32 API and driver documentation to be used within IDA.
  ☆148Updated last year
• silverf0x / RpcView
  RpcView is a free tool to explore and decompile Microsoft RPC interfaces
  ☆947Updated last year