windows-internals topic

An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

mrexodia

Windows 10 PE image loader (LDR) NTDLL component toolbox

andrew-boyarshin

Delphi library for system programming on Windows using Native API

diversenok

UltimateAntiCheat is a free & open source usermode anti-cheat system made to detect and prevent common attack vectors in game hacking

AlSch092

DLL Injector (LoadLibrary) in C++ (x86 / x64) - LoadLibrary DLL injector

adamhlt

Custom LoadLibrary / GetProcAddress (x86 / x64) - Load DLL and retrieve functions manually

adamhlt

PE Explorer in C++ (x86 / x64) - PE file parser, retrieve exports and imports

adamhlt

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

adamhlt

Static user/kernel mode library that allows access to all functions and global variables by extracting offsets from the PDB

Air14

An example of how to use Microsoft Windows Warbird technology

DownWithUp