zodiacon/TotalPE2

Stars
143
Rank 257,007 (Top 6 %)
Language
C++
License
MIT License
Created almost 2 years ago
Updated 4 months ago

zodiacon/TotalPE2

zodiacon

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

PE Viewer

Total PE (take 2)

Yet another PE Viewer.

An imporoved version over Total PE:

Tabs
Syntax highlighting in assembly and manifest views
Use of symbols provding extra information
Headers structures view
Basic "Find"
More to come!

As usual, it's a work in progress. Some PE viewing features are still missing - examples: some data directories, graphic viewers for dialogs and menus

Enjoy!

WindowsInternals

Windows Internals Book 7th edition Tools

TotalRegistry

Total Registry - enhanced Registry editor/viewer

AllTools

All reasonably stable tools

SystemExplorer

Windows System Explorer

windowskernelprogrammingbook

The Windows Kernel Programming book samples

ProcMonXv2

Process Monitor X v2

ProcMonX

Extended Process Monitor-like tool based on Event Tracing for Windows

EtwExplorer

View ETW Provider manifest

Win10SysProgBookSamples

Windows 10 System Programming book samples

PEExplorerV2

Portable Executable Explorer version 2

DriverMon

Monitor activity of any driver

windowskernelprogrammingbook2e

Samples for the book Windows Kernel Programming, 2nd edition

WFPExplorer

Windows Filtering Platform Explorer

ObjectExplorer

Explore Kernel Objects on Windows

WinSpy

Enhanced version of the classic Spy++ tool

QuickAsm

Simple x86/x64 Assembler/Disassembler/Emulator

PEExplorer

Portable Executable Explorer

TotalPE

Yet another PE Viewer

sysrun

Run any executable as SYSTEM account (no service required)

PoolMonXv2

Kernel Pool Monitor

rust-course

RunAppContainer

Run executables in an AppContainer

CLRExplorer

Explore .NET Processes and Dump files

PoolMonX

A GUI version of the classic PoolMon tool

WinDbgX

An attempt to create a friendly version of WinDbg

ApiSetView

NetworkExplorer

Windows Network Information

GflagsX

Enhanced version of the GFlags tool

PdbView

PdbView shows the contents of PDB files

ALPCLogger

Log ALPC activity

JobExplorer

Explore Job Objects on a Windows system

DllInjectionWithThreadContext

This is a sample that shows how to leverage SetThreadContext for DLL injection

Recon2023

Recon 2023 slides and code

WinSys

C++ library for low-level Windows development

DbgPrint

Debug Print viewer (user and kernel)

ProcExpX

KernelObjectView

View handles and object for each object type

syllabi

PoolMonXv3

Monitor Kernel pool allocations tags

winnativeapibooksamples

Samples from my book Windows Native API programming

VerifierDLL

Example of building an application verifer DLL

WTLHelper

WTL helper library

PerfMonX

PerfMonX is an enhanced Performance Monitor tool

WinEventHooks

SetWinEventHook Sample

DotNetExp

DeviceExplorer

BITSManager

BITS Transfers Manager

DepWalk

CPUStress

CPU Stress v3.0

InfStudio

INF Studio for easier working with driver installation files

DotNextSP2019

DotNext 2019 St. Petersburg Talk Demos

NativeApps

Demos and presentation from SECArmy Village Grayhat 2020

TotalSystem

View Windows System in action

ObjectBrowser

An alternative tool to Sysinternals WinObj tool (nicer icons!)

ObjMgrProjFS

Projected File System Sample (Object Manager Namespace)

ndcoslo2019

NDC Oslo 2019 slides and demos

ManagedWindows

Managed wrappers around the Windows API and some Native API

DllIconHandler

Shows different icons for 64 and 32-bit DLLs. Register with RegSvr32 to install

PEParser

Portable Executable parsing library, used by PEExplorer. Also available as a nuget package

youtubecode

Youtube channel sample code

Blog

DirectUI

BgInfo

BgInfo is a WPF variant on the Sysinternals BgInfo tool.

DotNextMoscow2019

DotNextMoscow2019

TaskSched

NtfsStreams

Viewing NTFS alternate streams in files

DebugHelp

.NET wrapper for dbghelp.dll

RegistryExplorer

InterceptionDemo

Sample showing the use of CoGetInterceptor

MetroManager

KObjects

Sample for Creating a new kernel object type and supporting API

HexStudio

Hex Studio is a work in progress Hex viewer and editor.

ObjDir

Simple command line version of Sysinternals WinObj. Currently just lists object names and types given an object manager directory.

MalDevWorkshopWebinar

Demo from the Malware Analysis and Development Webinar

SrvDrv

Services and Drivers control application

WindowTitleEx

WindowTitleEx shows the HWND, thread ID and process in Windows titles. Tray icon to remove these extra is included.

StructuredStorage

C++ wrapper for the Windows structured storage implementation known as Compound Files

AccessMask

ErrorLookup

Simple error lookup for Win32 and NTSTATUS errors

Minimal

winsta

Show Window Stations, Desktops and top level windows

VirtualDiskService

NativePowers

Native Powers Talk demos

Zodiacon.WPF

WPF helper library

WMIExplorer

CalculatorX

An expression calculator

pstools-rust

DotNext2018

Logo2

objdir-rs

Rust version of the objdir tool

CoreCpp21Demos

QSlice2

Tribute to the classic QSlice tool

DotNextPieter2021

DotNext 2021 Pieter slides and demos

QSlice

MandelImGui

Simple Mandelbrot set with Dear ImGUI

Timer

MonikerFun

Demonstrating a simple moniker.

SpriteSheet

Simple Sprite Sheet creator

Presentations

public presentation materials

AsyncMandelbrotColor

Fun with the Mandelbrot Set