AllTools: All reasonably stable tools for reverse engineering

by do son · January 3, 2020

AllTools

All reasonably stable tools

AccessMask – decode access mask for common object types

BgInfo – WPF version of the Sysinternals BgInfo tool

CpuStres – thread/CPU stress testing app

DebugPrint – monitor OutputDebugString/DbgPrint(Ex) calls (no driver needed)

DriverMon – monitor any driver activity

ErrorLookup – error code description for Win32 (GetLastError) and NTSTATUS

ETWExplorer – view ETW XML manifests for registered providers

FSClass – lists the file system filter classes (command line)

GFlagsX – an enhanced version of the GFlags tool

Kdump – generate a local kernel dump

Kdump64 – generate a local kernel dump (64 bit)

KernelObjectView – View stats of kernel objects and handles in the system

MetroManager – list (and launch) installed Windows Runtime components and apps

MemMapView – view any process memory (including protected and minimal processes)

NtfsStreams – show NTFS alternate streams in files

ObjDir – command-line tool to show object manager namespace

PEExplorer – PE file viewer

PoolMonX – kernel pool memory

PoolMonXv2 – kernel pool memory (version 2)

PdbView – view PDB files

PerfMonX – enhanced Performance Monitor tool

ProcMonX – ProcMon-like tool based on Event Tracing for Windows (ETW)

QSlice – modern version of the classic QSlice tool

QSliceX – pie chart graphics for QSlice

Sysrun – run any executable with the SYSTEM account (no service needed)

System Explorer (SysExp) – system, process, thread, and other information – all in one tool (WIP)

WindowTitleEx – Show HWND, TID, PID on windows. Revert with included tray icon

winsta – Show current session’s window stations, desktops and top-level visible windows (with non-empty titles)

XCalculator (XCalc) – simple calculator supporting variables and functions

git clone https://github.com/zodiacon/AllTools.git