Alternatives and similar repositories for WinSys

Users that are interested in WinSys are comparing it to the libraries listed below

• zodiacon / KernelObjectView
  View handles and object for each object type
  ☆65Updated 5 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆66Updated last year
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆68Updated 4 years ago
• zodiacon / DeviceExplorer
  ☆47Updated last month
• Biswa96 / TraceEvent
  Trace events in real time sessions
  ☆45Updated last year
• repnz / windows-inspector
  A driver to intercept low level windows events
  ☆62Updated 5 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Updated 4 years ago
• hfiref0x / Misc
  Miscellaneous Code and Docs
  ☆81Updated 2 weeks ago
• microsoft / ndis-driver-library
  Code to make it easier to write an NDIS network driver on Windows
  ☆90Updated last year
• mgeeky / PE-library
  Lightweight Portable Executable parsing library and a demo peParser application.
  ☆80Updated 2 years ago
• ytk2128 / pe32-password
  A simple password-based PE encryptor for Windows 32-bit executables.
  ☆52Updated 6 months ago
• zodiacon / ndcoslo2019
  NDC Oslo 2019 slides and demos
  ☆32Updated 4 years ago
• Biswa96 / PDBDownloader
  Standalone program to download PDB Symbol files for debugging without WDK
  ☆76Updated 6 years ago
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆87Updated 9 years ago
• zodiacon / ProcExpX
  ☆66Updated 3 years ago
• andrew-boyarshin / LoaderWatch
  Windows 10 PE image loader (LDR) NTDLL component toolbox
  ☆49Updated 5 years ago
• hMihaiDavid / addscn
  Add an empty section to a PE file
  ☆52Updated 7 years ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆64Updated 10 months ago
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆97Updated 5 months ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 2 years ago
• zodiacon / ApiSetView
  API Set Viewer
  ☆90Updated 5 months ago
• lowleveldesign / comon
  A WinDbg extension to trace COM interactions
  ☆114Updated last year
• TheAenema / hm-pe-packer
  A x64 PE Packer/Protector Developed in C++ and VisualStudio
  ☆52Updated last year
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆71Updated 2 months ago
• SHA-MRIZ / FsMinfilterHooking
  ☆31Updated 4 years ago
• zodiacon / DllIconHandler
  Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install
  ☆35Updated 6 months ago
• zodiacon / PoolMonXv2
  Kernel Pool Monitor
  ☆126Updated 3 years ago
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆54Updated 3 years ago
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆131Updated last year
• 0x25bit / Labs
  ☆37Updated 6 years ago