XNTSV program for detailed viewing of system structures for Windows.

PowerRunAsSystem is a PowerShell script, also available as an installable module through the PowerShell Gallery, designed to impersonate the NT AUTHORITY/SYSTEM user and execute commands or launch interactive processes without relying on third-party tools. It achieves this using only native Windows build-in features.

ExectOS Operating System

Ever wanted to execute PHP in your kernel driver? Look no further!

Various Command Line Utilities Ported to Windows NT

A performant, parallel, probabilistic, random acyclic-graph, low-latency, perfect hash generation library.

Experimental tracing framework for Python on Windows.

A UNIX-like Non-GNU command line toolkit

Vintage window borders for modern Windows.

A tool to deal with Windows Phone Board support packages on Windows Phone images

「⚙️」Detect which native Windows API's (NtAPI) are being hooked

🇦🇺 This is a package for obtaining Bills from Australian parliaments.

Automatically extracts NT and LM hashes from Windows memory dumps based on volatility.

Microsoft Windows user-mode API access with clean Rust types.

A tool designed to dump Windows NT devices of any architecture

A repository featuring my take on customizing the Windows NT family.

rsync-ntacls: this patch enables rsync on Windows to transfer NT ACLS

NT executable dissector and emulator

Use ntlm.pw to quickly and automatically convert hash dumps to credentials

An attempt to create an NT clone. No plans for writing Win32 subsystem however.