zodiacon/winnativeapibooksamples external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

zodiacon/winnativeapibooksamples

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/zodiacon/winnativeapibooksamples)

Close

zodiacon / winnativeapibooksamplesView on GitHubMore

• External links
• Readme badge

Samples from my book Windows Native API programming

☆79May 11, 2025Updated 9 months ago

Alternatives and similar repositories for winnativeapibooksamples

Users that are interested in winnativeapibooksamples are comparing it to the libraries listed below

• zodiacon / WMIExplorer

  View on GitHub
  ☆27Jul 13, 2025Updated 7 months ago
• zodiacon / RemoteThreadDetection

  View on GitHub
  Remote Thread Detection with a Kernel Driver
  ☆34Jan 14, 2025Updated last year
• zodiacon / MalDevWorkshopWebinar

  View on GitHub
  Demo from the Malware Analysis and Development Webinar
  ☆25Apr 17, 2024Updated last year
• zodiacon / VerifierDLL

  View on GitHub
  Example of building an application verifer DLL
  ☆51Jun 1, 2024Updated last year
• zodiacon / Logo2

  View on GitHub
  ☆13Aug 17, 2025Updated 6 months ago
• zodiacon / windowskernelprogrammingbook2e

  View on GitHub
  Samples for the book Windows Kernel Programming, 2nd edition
  ☆373Aug 2, 2025Updated 7 months ago
• iHackerJi / MiniWfp

  View on GitHub
  基于WFP的小型网络过滤驱动，拦截百度的DNS，感谢公司前辈们的思路与指导。
  ☆14Aug 19, 2021Updated 4 years ago
• zodiacon / QuickAsm

  View on GitHub
  Simple x86/x64 Assembler/Disassembler/Emulator
  ☆188Dec 13, 2025Updated 2 months ago
• zodiacon / eBPFStudio

  View on GitHub
  Work with eBPF on Windows
  ☆44Feb 26, 2025Updated last year
• csandker / InterProcessCommunication-Samples

  View on GitHub
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆209Feb 29, 2024Updated 2 years ago
• Biswa96 / TraceEvent

  View on GitHub
  Trace events in real time sessions
  ☆47Aug 25, 2023Updated 2 years ago
• winsiderss / phnt

  View on GitHub
  Native API header files for the System Informer project.
  ☆1,351May 25, 2025Updated 9 months ago
• MeeSong / Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC

  View on GitHub
  Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC
  ☆27Nov 17, 2018Updated 7 years ago
• diversenok / Powercfg

  View on GitHub
  Reversing and reimplementing "powercfg /requests" using Native API
  ☆30Jul 25, 2024Updated last year
• Fyyre / ntdll

  View on GitHub
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆149Jun 16, 2019Updated 6 years ago
• zodiacon / windowskernelprogrammingbook

  View on GitHub
  The Windows Kernel Programming book samples
  ☆666Sep 25, 2023Updated 2 years ago
• zodiacon / Win10SysProgBookSamples

  View on GitHub
  Windows 10 System Programming book samples
  ☆450Oct 19, 2025Updated 4 months ago
• zodiacon / TotalPE2

  View on GitHub
  PE Viewer
  ☆210Jan 24, 2026Updated last month
• D0pam1ne705 / Direct-NtCreateUserProcess

  View on GitHub
  Call NtCreateUserProcess directly as normal.
  ☆77May 17, 2022Updated 3 years ago
• capt-meelo / NtCreateUserProcess

  View on GitHub
  Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html
  ☆144May 10, 2022Updated 3 years ago
• Alien177 / WINAPI

  View on GitHub
  ☆11Jun 24, 2024Updated last year
• zodiacon / winsta

  View on GitHub
  Show Window Stations, Desktops and top level windows
  ☆17Jun 10, 2023Updated 2 years ago
• OSRDrivers / tunnel

  View on GitHub
  Demonstrate the behavior of the tunnel cache on Windows
  ☆11Aug 13, 2019Updated 6 years ago
• lem0nSec / ASM_World

  View on GitHub
  Offensive Assembly code snippets.
  ☆13Jul 12, 2023Updated 2 years ago
• wwh1004 / PortableMetadata

  View on GitHub
  ☆14Jul 29, 2024Updated last year
• zodiacon / WFPExplorer

  View on GitHub
  Windows Filtering Platform Explorer
  ☆330Aug 28, 2025Updated 6 months ago
• zodiacon / DeviceExplorer

  View on GitHub
  ☆58Feb 27, 2026Updated last week
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆49Dec 31, 2021Updated 4 years ago
• Nero22k / Kernel-Programming-2023

  View on GitHub
  Repository of different kernel drivers written while studying Windows NT Driver development
  ☆12Apr 14, 2024Updated last year
• NattyNarwhal / dispcalc-w16

  View on GitHub
  Win16 Display Calculator
  ☆11Dec 19, 2018Updated 7 years ago
• Gabb4r / osed

  View on GitHub
  OSED course preparation materials.
  ☆15May 27, 2021Updated 4 years ago
• jonny-jhnson / RandomPOCs

  View on GitHub
  Repo that holds random POCs
  ☆52Jan 8, 2024Updated 2 years ago
• hasherezade / thread_namecalling

  View on GitHub
  Process Injection using Thread Name
  ☆299Apr 18, 2025Updated 10 months ago
• zodiacon / ErrorLookup

  View on GitHub
  Simple error lookup for Win32 and NTSTATUS errors
  ☆20Nov 25, 2018Updated 7 years ago
• BianChengNan / FileSystemWatcherEx

  View on GitHub
  A simple enhanced class based on .net official FileSystemWatcher
  ☆12Jun 17, 2021Updated 4 years ago
• zodiacon / AccessMask

  View on GitHub
  ☆20Jul 9, 2019Updated 6 years ago
• s4dbrd / ETWReader

  View on GitHub
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆18Jun 29, 2024Updated last year
• lem0nSec / Alcatraz

  View on GitHub
  An example of Windows self-replicating malware.
  ☆11Jan 16, 2023Updated 3 years ago
• zodiacon / InfStudio

  View on GitHub
  INF Studio for easier working with driver installation files
  ☆39Nov 11, 2023Updated 2 years ago