Alternatives and similar repositories for WinSys

Users that are interested in WinSys are comparing it to the libraries listed below

• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆68Updated last year
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆70Updated 4 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆89Updated 10 years ago
• repnz / windows-inspector
  A driver to intercept low level windows events
  ☆62Updated 6 years ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆147Updated 6 years ago
• zodiacon / KernelObjectView
  View handles and object for each object type
  ☆64Updated 6 years ago
• hfiref0x / Misc
  Miscellaneous Code and Docs
  ☆84Updated 4 months ago
• SHA-MRIZ / FsMinfilterHooking
  ☆32Updated 4 years ago
• Biswa96 / PDBDownloader
  Standalone program to download PDB Symbol files for debugging without WDK
  ☆78Updated 6 years ago
• mgeeky / PE-library
  Lightweight Portable Executable parsing library and a demo peParser application.
  ☆80Updated 2 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆52Updated 4 years ago
• SweetIceLolly / Prevent_File_Deletion
  Record & prevent file deletion in kernel mode
  ☆44Updated 5 years ago
• zodiacon / DeviceExplorer
  ☆58Updated 5 months ago
• microsoft / ndis-driver-library
  Code to make it easier to write an NDIS network driver on Windows
  ☆89Updated 2 years ago
• hMihaiDavid / addscn
  Add an empty section to a PE file
  ☆53Updated 8 years ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆107Updated 9 months ago
• Biswa96 / TraceEvent
  Trace events in real time sessions
  ☆45Updated 2 years ago
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆56Updated 4 years ago
• ch3rn0byl / WinDbg-Extensions
  ☆18Updated 4 years ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆73Updated last year
• ytk2128 / pe32-password
  A simple password-based PE encryptor for Windows 32-bit executables.
  ☆53Updated 10 months ago
• 0x25bit / Labs
  ☆42Updated 6 years ago
• zodiacon / BITSManager
  BITS Transfers Manager
  ☆44Updated 5 months ago
• jxy-s / vfdynf
  Application Verifier Dynamic Fault Injection
  ☆39Updated 2 months ago
• zodiacon / ApiSetView
  API Set Viewer
  ☆90Updated 9 months ago
• zodiacon / PoolMonXv2
  Kernel Pool Monitor
  ☆127Updated 3 years ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 3 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆86Updated 5 years ago
• 0ffffffffh / system_call_hook_win10_1903
  This is the P.O.C source for hooking the system calls on Windows 10 (1903) using it's dynamic trace feature weakness
  ☆53Updated 6 years ago
• zodiacon / ProcExpX
  ☆69Updated 3 years ago