[Deprecated, work in progress alternative: https://github.com/M2Team/NanaRun] Series of System Administration Tools

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

Go shellcode loader that combines multiple evasion techniques

Bypass Credential Guard by patching WDigest.dll using only NTAPI functions

Some random system tools for Windows

Windows Rregistry Linking Utility

Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks

「⚙️」Detect which native Windows API's (NtAPI) are being hooked

Codes that could trigger BSOD (Blue Screen of Death) on Windows.

Disclosing information from an AppContainer.

Microsoft Windows user-mode API access with clean Rust types.

Samples that shows how to use API Hook libraries: Detours, Deviare, MHook, EasyHook to hide files with the "+/*.txt" file name pattern.

Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.

KNSoft.NDK provides native C/C++ definitions and import libraries for Windows NT and some specifications.

Windows Hacks by Windows Programmer

💠 Documented and undocumented WinAPI search.

Win32less fork of ReactOS (only kernel and NT programs)

obfuscate WINAPI/NTAPI calls easily.

Windows malware development C/C++ snippets.