Alternatives and similar repositories for winnativeapibooksamples

Users that are interested in winnativeapibooksamples are comparing it to the libraries listed below

• zodiacon / WMIExplorer

  View on GitHub
  ☆27Jul 13, 2025Updated 7 months ago
• zodiacon / RemoteThreadDetection

  View on GitHub
  Remote Thread Detection with a Kernel Driver
  ☆34Jan 14, 2025Updated last year
• zodiacon / MalDevWorkshopWebinar

  View on GitHub
  Demo from the Malware Analysis and Development Webinar
  ☆23Apr 17, 2024Updated last year
• zodiacon / VerifierDLL

  View on GitHub
  Example of building an application verifer DLL
  ☆51Jun 1, 2024Updated last year
• zodiacon / Logo2

  View on GitHub
  ☆13Aug 17, 2025Updated 5 months ago
• zodiacon / windowskernelprogrammingbook2e

  View on GitHub
  Samples for the book Windows Kernel Programming, 2nd edition
  ☆374Aug 2, 2025Updated 6 months ago
• iHackerJi / MiniWfp

  View on GitHub
  基于WFP的小型网络过滤驱动，拦截百度的DNS，感谢公司前辈们的思路与指导。
  ☆14Aug 19, 2021Updated 4 years ago
• zodiacon / QuickAsm

  View on GitHub
  Simple x86/x64 Assembler/Disassembler/Emulator
  ☆189Dec 13, 2025Updated 2 months ago
• zodiacon / eBPFStudio

  View on GitHub
  Work with eBPF on Windows
  ☆44Feb 26, 2025Updated 11 months ago
• csandker / InterProcessCommunication-Samples

  View on GitHub
  Some Code Samples for Windows based Inter-Process-Communication (IPC)
  ☆208Feb 29, 2024Updated last year
• Biswa96 / TraceEvent

  View on GitHub
  Trace events in real time sessions
  ☆47Aug 25, 2023Updated 2 years ago
• winsiderss / phnt

  View on GitHub
  Native API header files for the System Informer project.
  ☆1,343May 25, 2025Updated 8 months ago
• MeeSong / Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC

  View on GitHub
  Windows_OS_Internals_Curriculum_Resource_Kit-ACADEMIC
  ☆27Nov 17, 2018Updated 7 years ago
• diversenok / Powercfg

  View on GitHub
  Reversing and reimplementing "powercfg /requests" using Native API
  ☆30Jul 25, 2024Updated last year
• Fyyre / ntdll

  View on GitHub
  ntdll.h - compatible with MSVC 6.0, Intel C++ Compiler and MinGW. Serves as a complete replacement for Windows.h
  ☆149Jun 16, 2019Updated 6 years ago
• zodiacon / windowskernelprogrammingbook

  View on GitHub
  The Windows Kernel Programming book samples
  ☆664Sep 25, 2023Updated 2 years ago
• D0pam1ne705 / Direct-NtCreateUserProcess

  View on GitHub
  Call NtCreateUserProcess directly as normal.
  ☆76May 17, 2022Updated 3 years ago
• zodiacon / Win10SysProgBookSamples

  View on GitHub
  Windows 10 System Programming book samples
  ☆450Oct 19, 2025Updated 3 months ago
• zodiacon / TotalPE2

  View on GitHub
  PE Viewer
  ☆208Jan 24, 2026Updated 3 weeks ago
• capt-meelo / NtCreateUserProcess

  View on GitHub
  Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html
  ☆143May 10, 2022Updated 3 years ago
• zodiacon / winsta

  View on GitHub
  Show Window Stations, Desktops and top level windows
  ☆17Jun 10, 2023Updated 2 years ago
• Alien177 / WINAPI

  View on GitHub
  ☆10Jun 24, 2024Updated last year
• lem0nSec / ASM_World

  View on GitHub
  Offensive Assembly code snippets.
  ☆13Jul 12, 2023Updated 2 years ago
• wwh1004 / PortableMetadata

  View on GitHub
  ☆14Jul 29, 2024Updated last year
• OSRDrivers / tunnel

  View on GitHub
  Demonstrate the behavior of the tunnel cache on Windows
  ☆10Aug 13, 2019Updated 6 years ago
• zodiacon / WFPExplorer

  View on GitHub
  Windows Filtering Platform Explorer
  ☆325Aug 28, 2025Updated 5 months ago
• zodiacon / DeviceExplorer

  View on GitHub
  ☆58Dec 8, 2025Updated 2 months ago
• iammaguire / Salient-Rootkit

  View on GitHub
  A kernel mode Windows rootkit in development.
  ☆49Dec 31, 2021Updated 4 years ago
• Gabb4r / osed

  View on GitHub
  OSED course preparation materials.
  ☆15May 27, 2021Updated 4 years ago
• NattyNarwhal / dispcalc-w16

  View on GitHub
  Win16 Display Calculator
  ☆11Dec 19, 2018Updated 7 years ago
• Nero22k / Kernel-Programming-2023

  View on GitHub
  Repository of different kernel drivers written while studying Windows NT Driver development
  ☆12Apr 14, 2024Updated last year
• jonny-jhnson / RandomPOCs

  View on GitHub
  Repo that holds random POCs
  ☆52Jan 8, 2024Updated 2 years ago
• hasherezade / thread_namecalling

  View on GitHub
  Process Injection using Thread Name
  ☆297Apr 18, 2025Updated 9 months ago
• zodiacon / ErrorLookup

  View on GitHub
  Simple error lookup for Win32 and NTSTATUS errors
  ☆20Nov 25, 2018Updated 7 years ago
• BianChengNan / FileSystemWatcherEx

  View on GitHub
  A simple enhanced class based on .net official FileSystemWatcher
  ☆12Jun 17, 2021Updated 4 years ago
• lem0nSec / Alcatraz

  View on GitHub
  An example of Windows self-replicating malware.
  ☆11Jan 16, 2023Updated 3 years ago
• s4dbrd / ETWReader

  View on GitHub
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆17Jun 29, 2024Updated last year
• zodiacon / AccessMask

  View on GitHub
  ☆20Jul 9, 2019Updated 6 years ago
• zodiacon / DllIconHandler

  View on GitHub
  Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install
  ☆38Dec 28, 2024Updated last year