Alternatives and similar repositories for WMIExplorer

Users that are interested in WMIExplorer are comparing it to the libraries listed below

• zodiacon / KObjects
  Sample for Creating a new kernel object type and supporting API
  ☆27Updated last year
• zodiacon / WinEventHooks
  SetWinEventHook Sample
  ☆50Updated 2 years ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆44Updated 5 months ago
• Wack0 / SecureBootPolicyTools
  Take back control of Windows Code Integrity, no exploits or patching required! Requires that you control your own Platform Key (PK).
  ☆50Updated 3 years ago
• zodiacon / RemoteThreadDetection
  Remote Thread Detection with a Kernel Driver
  ☆34Updated last year
• zodiacon / VerifierDLL
  Example of building an application verifer DLL
  ☆50Updated last year
• zodiacon / BITSManager
  BITS Transfers Manager
  ☆45Updated 8 months ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆71Updated last year
• zodiacon / InfStudio
  INF Studio for easier working with driver installation files
  ☆39Updated 2 years ago
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆77Updated last year
• 3dnow / NtCreateLowBoxToken
  A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering
  ☆42Updated 7 months ago
• m417z / x64dbg-symbol-tldr
  An x64dbg plugin which helps make sense of long C++ symbols
  ☆59Updated 2 years ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆96Updated 9 months ago
• m417z / x64dbg-xfg-marker
  An x64dbg plugin which marks XFG call signatures as data
  ☆78Updated 2 years ago
• ch3rn0byl / Gremlins
  ☆14Updated 2 years ago
• Ingan121 / DWMSwitch
  Easy DWM switcher without Winlogon suspension
  ☆17Updated last year
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆77Updated last year
• 0mWindyBug / WFPCalloutReserach
  research revolving the windows filtering platform callout mechanism
  ☆35Updated last year
• ByteWhite1x1 / PatchGuardResearch
  Bypassing kernel patch protection runtime
  ☆20Updated 2 years ago
• zodiacon / MalDevWorkshopWebinar
  Demo from the Malware Analysis and Development Webinar
  ☆23Updated last year
• DosX-dev / PEBLoader.h
  Tiny C header that allows easy hiding of WinAPI imports via PEB
  ☆37Updated 4 months ago
• hasherezade / sig_finder
  Signature finder (from PE-bear)
  ☆39Updated 5 months ago
• benheise / ANGRYORCHARD
  A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.
  ☆34Updated 3 years ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆81Updated 7 months ago
• repnz / windows-imports-searcher
  Support Windows OS Reversing by searching easily for references to functions across many DLLs
  ☆36Updated 4 years ago
• Sh3lldon / Vulnerable-WinKern-Drivers
  Here you can find some vulnerable Windows Kernel Drivers
  ☆13Updated 11 months ago
• ManulMap / malstring
  Using c++23 compile-time magic to produce obfuscated PIC strings and arrays.
  ☆30Updated last year
• Flerov / TS-Changer
  TS-Changer - Forces the machine in/out of TestSigning Mode at runtime.
  ☆66Updated 2 years ago
• gmh5225 / Driver-SoulExtraction
  SoulExtraction is a windows driver library for extracting cert information in windows drivers
  ☆25Updated 2 years ago
• VergiliusProject / kernels-data
  Windows kernel PDB data parsed into YAML
  ☆42Updated 2 months ago