Interactive CTF Exploration Tool
-
Updated
Sep 17, 2021 - C
#
windows-internals
Here are 78 public repositories matching this topic...
A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.
windows reverse-engineering windows-10 cheatsheet syscalls malware-analysis malware-research windows-api systems-programming win32-api windows-internals windows-11
-
Updated
Oct 4, 2024
PoCs and tools for investigation of Windows process execution techniques
-
Updated
Mar 15, 2025 - C#
An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).
python windows emulator cross-platform sandbox x64 reverse-engineering malware python3 easy-to-use malware-analyzer malware-analysis malware-research unicorn hacktoberfest debugging-tools minidump unpacking windows-internals
-
Updated
Feb 2, 2024 - C
Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
workshop shellcode syscalls malware-analysis malware-development shellcode-loader antivirus-evasion windows-internals edr-bypass edr-evasion antivirus-bypass malware-development-guide direct-syscalls indirect-syscalls
-
Updated
May 23, 2025 - C
An advanced tool for working with access tokens and Windows security policy.
-
Updated
May 29, 2025 - Pascal
UltimateAnticheat is an open source usermode anti-cheat system made to detect and prevent common attack vectors in game cheating (C++, Windows)
cplusplus game-hacking anticheat anti-cheat anti-debugging windows-internals game-cheat code-integrity game-security game-security-tools game-cheating-prevention
-
Updated
Apr 19, 2025 - C
A wrapper library around native windows sytem APIs
obfuscation system reverse-engineering malware modern-cpp cpp17 low-level syscall windows-internals native-api
-
Updated
Feb 2, 2021 - C++
My notes while studying Windows internals
-
Updated
Dec 9, 2024 - C
🐟 PoC of a VBA macro spawning a process with a spoofed parent and command line.
-
Updated
Apr 28, 2020 - VBA
Manipulating and Abusing Windows Access Tokens.
windows tokens post-exploitation uac-bypass pentest-tool windows-privilege-escalation windows-internals windows-security lateral-movement
-
Updated
Jan 15, 2021 - C++
Single header version of System Informer's phnt library.
-
Updated
May 30, 2025 - CMake
Livro: Engenharia Reversa - Fundamentos e Prática
c windows linux assembly reverse-engineering livro malware-analysis win32 windows-api reversing windows-internals
-
Updated
May 10, 2025
The history of Windows Internals via symbols.
-
Updated
Nov 4, 2021 - C
Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools
-
Updated
Oct 30, 2022 - Python
DLL Injector (LoadLibrary) in C++ (x86 / x64) - LoadLibrary DLL injector
-
Updated
Aug 1, 2023 - C++
Delphi library for system programming on Windows using Native API
-
Updated
Jun 1, 2025 - Pascal
Some random system tools for Windows
-
Updated
Apr 16, 2022 - Pascal
An example of a client and server using Windows' ALPC functions to send and receive data.
-
Updated
Jan 21, 2025 - C
Improve this page
Add a description, image, and links to the windows-internals topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the windows-internals topic, visit your repo's landing page and select "manage topics."