owen800q / WinArk

Windows Anti-Rootkit Tool

WinArk

Introduction

• WinArk is an open source Anti-Rootkit(ARK) tool for Windows, aimed at reverse engineering of kernel. It supports from Windows 7 to Windows 11. We also support both 32 bit and 64 bit. Compared with other Ark tools, WinArk can run on the latest Windows 11 without updating binary files since it will automatically downloads requisite symbol files.

Compiling

• How to build WinArk

QQ Group: 392097880

If you don't want to become a contributor or submit issues, please don't join this group.

Contributing

Contributing to WinArk is super appreciated. If you want to contribute to WinArk, please read the Coding Conventions

Screenshots

Credits

• Core features by SystemExplorer
• Disassembly powered by capstone
• PE parser by TotalPE
• Network Explorer by NetworkExplorer
• Registry Explorer by TotalRegistry
• DeviceExplorer by DeviceExplorer
• Event Trace by ProcMonXv2
• Native API lib by phnt
• Theme config by systeminformer
• Windows spy by WinSpy