Lists (1)
Stars
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Kernel-supported System Informer plugin that adds cool features.
Kernel-mode Paravirtualization in Ring 2, LLVM based linker, and some other things!
Mirror of the SourceForge SVN https://sourceforge.net/p/processhacker/code/HEAD/tree/ - Process Hacker was rebranded and now maintained here https://github.com/winsiderss/systeminformer
CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
A Binary Ninja plugin that uses bruteforced XFG hashes to recover precise function prototypes
Converted phnt (Native API header files from the System Informer project) to IDA TIL, IDC (Hex-Rays).
Capture and analyze the high-level performance characteristics of graphics applications on Windows.
An advanced tool for working with access tokens and Windows security policy.
Documenting system information classes and their uses
Demo of the potential of C# for systems programming with the .NET native ahead-of-time compilation technology.
This repository contains downloads of unstable pre-release versions of System Informer.
A Project dedicated to making GPU Partitioning on Windows easier!
These are highly unstable, buggy, incomplete plugins that are not included with Process Hacker by default.
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals…
Custom owner menubar drawing for win32 even with aero themes using undocumented Windows messages and structures, previously unknown.
C++ STL in the Windows Kernel with C++ Exception Support
Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.
OpenSSL-based Authenticode signing for PE, CAB, CAT, MSI, APPX, and script file
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.
A dynamic VMP dumper and import fixer, powered by VTIL.
A repo for developers on Windows to file issues that impede their productivity, efficiency, and efficacy
Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) header…