zodiacon / WMIExplorer
☆13Updated last month
Related projects: ⓘ
- View Windows System in action☆36Updated last month
- Debug Print viewer (user and kernel)☆63Updated 7 months ago
- INF Studio for easier working with driver installation files☆36Updated 10 months ago
- Example of building an application verifer DLL☆44Updated 3 months ago
- SetWinEventHook Sample☆40Updated 11 months ago
- silence file system monitoring components by hooking their minifilters☆49Updated 7 months ago
- Sample for Creating a new kernel object type and supporting API☆20Updated last week
- ☆16Updated last year
- ☆13Updated 11 months ago
- Code samples that serve as references for Windows API functions☆11Updated 3 months ago
- An x64dbg plugin which helps make sense of long C++ symbols☆58Updated last year
- Support Windows OS Reversing by searching easily for references to functions across many DLLs☆33Updated 2 years ago
- BITS Transfers Manager☆37Updated 2 years ago
- ☆49Updated this week
- Signature finder (from PE-bear)☆29Updated 3 months ago
- ☆37Updated 10 months ago
- ☆56Updated 2 years ago
- ☆27Updated last year
- Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install☆32Updated 2 years ago
- Windows kernel PDB data parsed into YAML☆30Updated 8 months ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆46Updated 2 weeks ago
- ☆24Updated 3 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆79Updated last year
- Intraceptor intercept Windows NT API calls and redirect them to a kernel driver to bypass process/threads handle protections.☆27Updated 2 years ago
- ☆28Updated 3 years ago
- ☆19Updated 7 months ago
- ZeroImport is a lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel drive…☆44Updated last year
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆100Updated last year
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆46Updated last year