Alternatives and similar repositories for WinSys:

Users that are interested in WinSys are comparing it to the libraries listed below

• zodiacon / KernelObjectView
  View handles and object for each object type
  ☆63Updated 5 years ago
• sgabe / SymlinkProtect
  File system minifilter driver for Windows to block symbolic link attacks.
  ☆51Updated 4 years ago
• zodiacon / DbgPrint
  Debug Print viewer (user and kernel)
  ☆66Updated last year
• zodiacon / ndcoslo2019
  NDC Oslo 2019 slides and demos
  ☆32Updated 4 years ago
• zodiacon / DeviceExplorer
  ☆46Updated 5 months ago
• bb107 / RtlWow64
  c++ implementation of windows heavens gate
  ☆68Updated 4 years ago
• hfiref0x / Misc
  Miscellaneous Code and Docs
  ☆81Updated last year
• zodiacon / winnativeapibooksamples
  Samples from my book Windows Native API programming
  ☆61Updated this week
• DownWithUp / ALPC-Example
  An example of a client and server using Windows' ALPC functions to send and receive data.
  ☆96Updated 3 months ago
• yardenshafir / InformationClasses
  Documenting system information classes and their uses
  ☆50Updated 3 years ago
• zodiacon / TotalSystem
  View Windows System in action
  ☆39Updated last month
• zodiacon / WTLHelper
  WTL helper library
  ☆47Updated 2 months ago
• Biswa96 / TraceEvent
  Trace events in real time sessions
  ☆45Updated last year
• zodiacon / BITSManager
  BITS Transfers Manager
  ☆41Updated last month
• Microwave89 / createuserprocess
  Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
  ☆87Updated 9 years ago
• yardenshafir / cet-research
  A collection of tools, source code, and papers researching Windows' implementation of CET.
  ☆82Updated 4 years ago
• zodiacon / WMIExplorer
  ☆17Updated 9 months ago
• OSRDrivers / windbg-exts
  Various WinDbg extensions and scripts
  ☆31Updated 6 years ago
• zodiacon / RemoteThreadDetection
  Remote Thread Detection with a Kernel Driver
  ☆30Updated 3 months ago
• lowleveldesign / comon
  A WinDbg extension to trace COM interactions
  ☆114Updated last year
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆47Updated 2 months ago
• MeeSong / Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC
  Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC
  ☆24Updated 6 years ago
• SHA-MRIZ / FsMinfilterHooking
  ☆31Updated 4 years ago
• zodiacon / NativeApps
  Demos and presentation from SECArmy Village Grayhat 2020
  ☆38Updated 2 years ago
• mgeeky / PE-library
  Lightweight Portable Executable parsing library and a demo peParser application.
  ☆80Updated 2 years ago
• Fyyre / ntdll
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆137Updated 5 years ago
• zodiacon / ProcExpX
  ☆65Updated 3 years ago
• wbenny / EtwConsumerNT
  Simple project that demonstrates how an ETW consumer can be created just by using NTDLL
  ☆140Updated 6 years ago
• repnz / windows-inspector
  A driver to intercept low level windows events
  ☆63Updated 5 years ago
• zodiacon / sysrun
  Run any executable as SYSTEM account (no service required)
  ☆129Updated 11 months ago