zodiacon / WindowsInternalsLinks
Windows Internals Book 7th edition Tools
☆2,647Updated last year
Alternatives and similar repositories for WindowsInternals
Users that are interested in WindowsInternals are comparing it to the libraries listed below
Sorting:
- All reasonably stable tools☆1,367Updated last week
- Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)☆2,485Updated last week
- Windows Object Explorer 64-bit☆1,865Updated 3 weeks ago
- Windows System Explorer☆873Updated last month
- The official Windows Driver Kit documentation sources☆994Updated this week
- Sample extensions, scripts, and API uses for WinDbg.☆806Updated 2 weeks ago
- Set of tools to analyze Windows sandboxes for exposed attack surface.☆2,256Updated 2 months ago
- A free but powerful Windows kernel research tool.☆2,633Updated 3 weeks ago
- windows kernel security development☆2,052Updated 3 years ago
- Public mirror for win32-pr☆1,249Updated last week
- PE Tools - Portable executable (PE) manipulation toolkit☆1,158Updated 2 months ago
- Native API header files for the System Informer project.☆1,314Updated 7 months ago
- Windows 10 System Programming book samples☆448Updated 2 months ago
- PE file viewer/editor for Windows, Linux and MacOS.☆1,181Updated this week
- HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux☆2,916Updated 10 months ago
- A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container☆1,359Updated last year
- The Windows Kernel Programming book samples☆662Updated 2 years ago
- Public contributions for win32 API documentation☆456Updated this week
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,524Updated 2 months ago
- PE-bear (builds only)☆782Updated 2 years ago
- Hook system calls, context switches, page faults and more.☆2,620Updated 2 years ago
- Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loadi…☆3,191Updated 3 years ago
- Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall …☆1,336Updated 3 years ago
- Windows NT Syscall tables☆1,367Updated last week
- A Pin Tool for tracing API calls etc☆1,595Updated last month
- Portable Executable reversing tool with a friendly GUI☆3,435Updated 2 months ago
- State-of-the-art native debugging tools☆3,588Updated this week
- Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.☆6,100Updated 3 weeks ago
- RpcView is a free tool to explore and decompile Microsoft RPC interfaces☆1,032Updated 2 years ago
- Windows tool for dumping malware PE files from memory back to disk for analysis.☆1,814Updated last year