domain: windows
984 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| indiff/qttabbar QTTabBar is a Windows Explorer extension that adds tabbed browsing and other enhancements to File Explorer, updated for .NET 4.8 and modern… | 86 | 4868 | active |
| microsoft/WindowsAppSDK Windows App SDK (formerly Project Reunion) is a Microsoft SDK that brings modern Windows platform APIs, WinUI 3, and Fluent Design UI to de… | 98 | 4665 | active |
| taviso/loadlibrary A library that lets native Linux programs load and call functions from Windows DLLs via a custom PE/COFF loader with a dlopen-like API. It … | 39 | 4501 | active |
| x64dbg/ScyllaHide ScyllaHide is an advanced usermode anti-anti-debug library that hooks Windows functions to hide the presence of a debugger from debugged pr… | 23 | 4271 | active |
| unchihugo/FluentFlyout FluentFlyout is an open-source Windows 11 utility that displays modern, Fluent 2-styled flyouts for media control, lock key status, and tas… | 88 | 4171 | active |
| winscp/winscp WinSCP is a free, open-source file manager and transfer client for Windows supporting SFTP, FTP, FTPS, SCP, S3, WebDAV, and local-to-local … | 77 | 3791 | stable |
| SteveTheKiller/KillerPDF KillerPDF is a free, open-source (GPL-3.0) PDF editor for Windows built with C# and WPF, offering viewing, annotation, OCR, form filling, s… | 81 | 3656 | active |
| nmap/npcap Npcap is the Nmap Project's packet capture and injection library for Microsoft Windows, implementing the portable Pcap API via a custom NDI… | 83 | 3580 | active |
| derceg/explorerplusplus Explorer++ is a lightweight, fast, tabbed file manager for Windows built in C++. It is fully portable, supports bookmarks, file search, pre… | 67 | 3273 | active |
| Kevin-Robertson/Inveigh Inveigh is a cross-platform .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers, with a primary C# version and a legacy Power… | 53 | 3014 | active |
| makoto56/penetration-suite-toolkit A preconfigured Windows 11 penetration testing toolkit distributed as a VM image, bundling a large curated collection of security tools wit… | 34 | 2970 | active |
| mstorsjo/llvm-mingw A reproducibly built LLVM/Clang/LLD based mingw-w64 toolchain for compiling Windows binaries. It provides cross-compilers and native toolch… | 99 | 2933 | active |
| NetSPI/PowerUpSQL PowerUpSQL is a PowerShell toolkit for attacking and auditing SQL Server instances, supporting discovery, weak configuration auditing, priv… | 32 | 2737 | active |
| AxtMueller/Windows-Kernel-Explorer Windows Kernel Explorer (WKE) is a free Windows kernel research and inspection tool supporting Windows XP through Windows 11. It loads a ke… | 58 | 2717 | active |
| googleprojectzero/winafl WinAFL is a Windows fork of American Fuzzy Lop (AFL) for coverage-guided fuzzing of Windows binaries, including closed-source black-box tar… | 65 | 2604 | active |
| GameTechDev/PresentMon PresentMon is a set of tools for capturing and analyzing the performance characteristics of graphics applications on Windows, tracing frame… | 88 | 2537 | active |
| The-Wineskin-Project/WineskinServer Wineskin is a modernized macOS application for wrapping Windows software and games in Wine so they run as native-looking Mac apps. It suppo… | 10 | 2467 | active |
| Idov31/Nidhogg Nidhogg is an open-source Windows x64 kernel rootkit written in C++ that demonstrates a wide range of rootkit techniques such as process, t… | 83 | 2463 | active |
| DNSCrypt/SimpleDnsCrypt Simple DNSCrypt is a Windows GUI management tool for configuring dnscrypt-proxy. It simplifies setting up encrypted DNS on Windows systems. | 56 | 2450 | active |
| erengy/taiga Taiga is an open-source Windows desktop application that automatically detects anime videos you watch on your computer and syncs your progr… | 67 | 2329 | active |
| Runixe786/MD3-Windows A Rainmeter skin that brings Material You-style dynamic widgets to the Windows desktop, adapting colors from the user's wallpaper with ligh… | 34 | 2323 | active |
| UMSKT/UMSKT UMSKT (Universal MS Key Toolkit) is an open-source C++ CLI toolkit for researching and experimenting with Microsoft's pre-Vista (pre-2012) … | 78 | 2318 | active |
| eeeeeeeeee-code/e0e1-wx A Windows GUI tool (PySide6, Python 3.10+) for analyzing and penetration-testing WeChat mini-programs locally. It automates mini-program pa… | 80 | 2214 | active |
| Chrome++ Next Chrome++ Next is a version.dll injection (DLL hijack) that augments Google Chrome on Windows with tab enhancements, hotkey remapping, boss … | 97 | 2141 | active |
| SpecialKO/SpecialK Special K is a Windows DLL injection framework for PC games that fixes and enhances graphics, adds HDR support, framerate capping, and deta… | 95 | 2030 | active |
| hfiref0x/WinObjEx64 WinObjEx64 is a 64-bit Windows utility for exploring the Windows Object Manager namespace, viewing detailed object properties, structure du… | 88 | 1969 | active |
| vxunderground/VX-API VX-API is a C++ collection of functions implementing malicious functionality to aid in malware development, maintained by vx-underground. I… | 32 | 1938 | active |
| DosX-dev/obfus.h A macro-only C header library that obfuscates code at compile time, designed for the Tiny C Compiler on Windows x86/x64. It provides contro… | 68 | 1836 | active |
| Tavris1/ComfyUI-Easy-Install ComfyUI-Easy-Install is a portable one-click installer for ComfyUI that bundles an EZi Desktop application, requiring no manual Python or G… | 85 | 1831 | active |
| xaitax/Chrome-App-Bound-Encryption-Decryption A Windows post-exploitation research tool that bypasses Chromium's App-Bound Encryption using direct syscall-based reflective process hollo… | 63 | 1762 | active |
| klezVirus/SysWhispers3 SysWhispers3 is a Python command-line tool that generates header and assembly (ASM) file pairs for direct system calls to the Windows kerne… | 32 | 1653 | active |
| lmc999/auto-add-routes A set of Windows batch scripts and route tables that add China IP/domain split routing to full-tunnel VPN clients like WireGuard and OpenVP… | 75 | 1578 | active |
| microsoft/ai-dev-gallery AI Dev Gallery is a Windows application from Microsoft that lets developers explore over 25 interactive samples powered by local AI models … | 66 | 1497 | active |
| duty1g/x64dbg-mcp-server A native MCP (Model Context Protocol) plugin for x64dbg written in Zig that exposes the debugger's full functionality over HTTP with Stream… | 57 | 1460 | active |
| fholger/vrperfkit A collection of performance-oriented mods for VR games, delivered as a DLL injected next to a game executable. It provides upscaling (AMD F… | 23 | 1458 | active |
| 哔哩助理 (Bili Copilot) Bili.Copilot (and its predecessor Bili.Uwp) is a third-party native Windows client for Bilibili, built with UWP/WinUI and designed for the … | 54 | 5224 | maintenance |
| zodiacon/AllTools A collection of Pavel Yosifovich's reasonably stable Windows system tools, including process/driver monitors, kernel object viewers, PE fil… | 71 | 1440 | active |
| guidedhacking/GuidedHacking-Injector A C++ DLL injection library supporting x86, WOW64, and x64 injection with five injection methods and six shellcode execution techniques. It… | 32 | 1377 | active |
| micahmo/WgServerforWindows Wg Server for Windows (WS4W) is a desktop application that automates setting up and managing a WireGuard VPN server endpoint on Windows. It… | 77 | 1372 | active |
| Cracked5pider/Stardust Stardust is a modern 32/64-bit position independent shellcode (implant) template written in C++20. It provides compile-time FNV-1a hashing … | 70 | 1364 | active |
| boku7/Loki Loki is a stage-1 command and control (C2) framework written in Node.js that exploits script-jacking vulnerabilities in Electron applicatio… | 50 | 1360 | active |
| cccyd2003-qwq/pinkbin Pinkbin is an open-source Windows disk analyzer and cleaner built with Tauri 2, React, and Rust. It scans entire drives in seconds via dire… | 61 | 1343 | active |
| YtFlow/Maple Maple is a lightweight Universal Windows Platform (UWP) proxy app built on the leaf core, acting as a VPN provider on Windows. It supports … | 27 | 1322 | active |
| msasanmh/DNSveil DNSveil is a Windows-only secure DNS client supporting DNSCrypt, Anonymized DNSCrypt, DoH, DoT, and plain DNS over UDP/TCP, with built-in D… | 60 | 1319 | active |
| irzyxa/Volume2 Volume² is a freeware Windows application that replaces the standard Windows volume control with an advanced one supporting mouse wheel, sc… | 47 | 1317 | active |
| Merrit/nyrna Nyrna is a desktop application that suspends and resumes running games and applications, similar to console sleep modes, freeing CPU and GP… | 88 | 1273 | active |
| SychicBoy/NETReactorSlayer NETReactorSlayer is an open-source (GPLv3) deobfuscator and unpacker targeting assemblies protected with Eziriz .NET Reactor. It is availab… | 23 | 1255 | active |
| jark006/JarkViewer JarkViewer is a minimalist, fast image viewer for 64-bit Windows supporting a huge range of formats including AVIF, HEIC, JPEG XL, RAW came… | 83 | 1245 | active |
| horsicq/XPEViewer XPEViewer is a cross-platform GUI application for viewing and editing PE (Portable Executable) files, the executable format used on Windows… | 76 | 1230 | active |
| mukunku/ParquetViewer A free Windows desktop application for viewing and querying Apache Parquet files. It supports SQL queries, metadata inspection, partitioned… | 92 | 1228 | active |
| mgeeky/PackMyPayload PackMyPayload is a Python CLI proof-of-concept tool that packages files or directories into container formats (ZIP, 7zip, PDF, ISO, IMG, CA… | 32 | 1209 | active |
| x64dbg/GleeBug GleeBug is a debugging framework for Windows written in C, designed to make building debuggers and debugging tools complete and easy to use… | 76 | 1201 | active |
| ExeinfoASL/ASL Exeinfo Pe is a free Windows GUI tool that detects packers, protectors, compilers, .NET obfuscators, and packed binary data formats in PE e… | 93 | 1142 | active |
| TabularEditor/TabularEditor Tabular Editor 2.x is a free, open-source Windows desktop application for managing measures, calculated columns, display folders, perspecti… | 84 | 1102 | active |
| yourtablecloth/TableCloth TableCloth is a Windows application that launches Windows Sandbox to run security programs required by internet banking and e-government si… | 99 | 1100 | active |
| aiqinxuancai/discord-proxy A Windows tool that adds per-application proxy support to the Discord desktop client via DLL injection (version.dll hijacking), avoiding th… | 52 | 1099 | active |
| byxiaozhi/Typedown Typedown is a lightweight Markdown editor built natively for Windows using the WinUI framework. It offers a seamless, OS-integrated editing… | 50 | 1059 | active |
| NetSPI/PowerHuntShares PowerHuntShares is a PowerShell audit tool that inventories, analyzes, and reports excessive privileges on SMB share ACLs across Active Dir… | 53 | 1052 | active |
| indetectables-net/toolkit A curated Windows toolkit bundling 101 applications for reverse engineering, malware analysis, and cracking, installed via an automated Inn… | 89 | 1009 | active |
| yqxie1991/WxCleaner A lightweight cross-platform desktop tool for cleaning duplicate files received via WeChat. It uses a three-stage hashing strategy (size fi… | 71 | 1004 | active |
| TheMRLL/WinXray WinXray is a Windows universal proxy client supporting Xray/V2Ray (vmess/vless), Shadowsocks, SSR, Trojan, Trojan-go, and NaïveProxy, built… | 23 | 2790 | maintenance |
| matterpreter/DefenderCheck A C# command-line tool that takes a binary as input and splits it iteratively to pinpoint the exact bytes that Microsoft Defender flags on.… | 59 | 2623 | maintenance |
| Cenmrev/V2RayW V2RayW is a Windows GUI client for v2ray-core that generates config files and manages proxy servers from the system tray. It also handles W… | 10 | 2029 | maintenance |
| winauth/winauth WinAuth is a portable, open-source Windows desktop application that acts as a software two-factor authenticator, supporting RFC 6238 TOTP a… | 10 | 1857 | maintenance |
| antonpup/Aurora Aurora is an open-source Windows utility that unifies RGB lighting control across multiple peripheral brands (Logitech, Razer, Corsair, Coo… | 23 | 1844 | maintenance |
| Squalr/Squalr-Sharp Squalr is a high-performance memory editor for Windows desktop games, written in C#, supporting memory scanning, pointer scanning, and x86/… | 23 | 1597 | maintenance |
| CiscoCXSecurity/enum4linux enum4Linux is a Perl-based CLI tool that enumerates information from Windows and Samba hosts, serving as a Linux alternative to enum.exe. I… | 71 | 1407 | maintenance |
| CTCaer/jc_toolkit A Windows desktop application for managing, inspecting, and customizing Nintendo Switch Joy-Con controllers over Bluetooth HID. It provides… | 23 | 1101 | maintenance |
| microsoft/Cognitive-Samples-IntelligentKiosk A UWP sample application from Microsoft showcasing hands-free kiosk-style demos built on Azure Cognitive Services (Face, Computer Vision, T… | 10 | 1052 | maintenance |
| thomasxm/BOAZ_beta BOAZ is a multilayered AV/EDR evasion framework written in C++/C with Python linking, designed to generate polymorphic payloads that bypass… | 57 | 1042 | maintenance |
| WithSecureLabs/doublepulsar-detection-script A Python 2 script that sweeps networks to detect Windows systems compromised with the DOUBLEPULSAR implant (SMB and RDP variants) released … | 32 | 1030 | maintenance |
| rwfpl/rewolf-wow64ext A C++ helper library enabling 32-bit (x86) applications running under the WOW64 layer on 64-bit Windows to interact with native x64 process… | 23 | 1015 | maintenance |
| WankkoRee/eaio eaio (Electron All in One) is a Python tool with a GUI that reduces disk usage of Electron applications by hard-linking identical files acr… | 10 | 1015 | maintenance |
| rexdex/recompiler A C++ tool that converts Xbox 360 PowerPC executables into native Windows x86 executables, handling CPU translation, endianness, and GPU em… | 32 | 1740 | experimental |
| iPower/KasperskyHook A Windows research project that hooks system calls by loading Kaspersky's hypervisor driver (klhk.sys) and a custom kernel driver that subv… | 66 | 1314 | experimental |
| shadowsocksr-backup/shadowsocksr-csharp ShadowsocksR is a Windows proxy client written in C# that tunnels traffic through ShadowsocksR servers via a local SOCKS5/HTTP proxy with s… | 23 | 4495 | abandoned |
| NVIDIA/ChatRTX ChatRTX is a Windows demo application for building personalized RAG chatbots on local RTX GPUs using TensorRT-LLM, NVIDIA NIM, and LlamaInd… | 10 | 3121 | abandoned |
| microsoft/Git-Credential-Manager-for-Windows A secure Git credential helper for Windows that stores credentials and supports multi-factor authentication with GitHub, Bitbucket, and Vis… | 10 | 2940 | abandoned |
| TunnlTo/desktop-app TunnlTo was an open-source WireGuard client for Windows featuring advanced split tunneling and a user-friendly interface. The open-source p… | 57 | 1968 | abandoned |
| EmpireMediaScience/A1111-Web-UI-Installer A PowerShell-based installer that sets up Automatic1111's Stable Diffusion WebUI on Windows with all dependencies. The project is now obsol… | 23 | 1797 | abandoned |
| happynear/caffe-windows A Windows-specific fork of the Caffe deep learning framework with preconfigured Visual Studio project files, enabling users to build Caffe … | 23 | 1309 | abandoned |
| optiv/Mangle Mangle is a Go-based CLI tool that manipulates compiled Windows executables (.exe and DLL) to evade EDR detection. It strips known indicato… | 10 | 1235 | abandoned |
| cfwtf/clash_for_windows A backup mirror of the final release files of Clash for Windows (Fndroid/clash_for_windows_pkg), a popular GUI proxy client based on Clash.… | 17 | 1142 | abandoned |
| TestStack/White TestStack.White is a .NET framework for automating rich client applications built on Win32, WinForms, WPF, Silverlight, and SWT, providing … | 23 | 1002 | abandoned |
← prev page 10 / 10