zodiacon / ObjDir
Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.
☆19Updated last year
Alternatives and similar repositories for ObjDir:
Users that are interested in ObjDir are comparing it to the libraries listed below
- Simple error lookup for Win32 and NTSTATUS errors☆18Updated 6 years ago
- ☆18Updated 5 years ago
- Static library and headers for linking your software with ntdll.dll☆32Updated 5 years ago
- Demonstrate the new FileDispositionInfoEx behavior☆14Updated 7 years ago
- An alternative tool to Sysinternals WinObj tool (nicer icons!)☆35Updated 6 years ago
- A tool to investigate the Windows device manager☆14Updated 6 years ago
- ☆28Updated 4 years ago
- Notes my learning steps about Windows-NT☆23Updated 7 years ago
- Headers for linking your software with ntdll.dll☆15Updated 4 years ago
- User-mode program parsing logs created by HyperPlatform☆18Updated 8 years ago
- Open Source Libraries Collection☆24Updated 9 years ago
- Remote memory library in C++17.☆31Updated 6 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆34Updated 3 years ago
- Dump PDB Symbols including support for Bochs Debugging Format (with wine support)☆15Updated last year
- DTrace for Windows in userspace; Frontend to ETW☆27Updated 2 years ago
- This repository contains some tools that I have written in the past☆28Updated last year
- A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.☆27Updated 6 years ago
- WhoCalls can query a directory of files, find the binaries, and search for a user specified Win API import. It and works with both 32-bit…☆17Updated 2 years ago
- Formely KMon, a Windows Kernel Driver designed to prevent malware attacks by monitoring the creation of registry keys in common autorun l…☆21Updated 11 years ago
- INF Studio for easier working with driver installation files☆36Updated last year
- Full reversing of the Microsoft Auxiliary Windows API Library and ported to C☆23Updated 3 months ago
- Various WinDbg extensions and scripts☆31Updated 6 years ago
- (This is a fork used primarily to submit patches into upstream repository) RpcView is a free tool to explore and decompile Microsoft RPC …☆19Updated last year
- A Hobbyist Operating System based off the ReactOS/NT Kernel experimenting with OS Development.☆26Updated 12 years ago
- viewing page boundaries of pages with PAGE_NOACCESS protection reveals the presence of x64dbg.☆23Updated 8 years ago
- penter hook example and driver time recorder☆31Updated 7 years ago
- HTTP/HTTPS/DNS inspector (windows driver)☆26Updated 6 years ago
- Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …☆23Updated 7 years ago
- WoW64 -> x64☆19Updated 8 years ago
- View handles and object for each object type☆62Updated 5 years ago