PSBits is a collection of Windows security and systems research tools written in C that enable deeper inspection and manipulation of system internals beyond standard operating system interfaces.
The project addresses the need for low-level access to Windows system components for security research, debugging, and forensic analysis. Rather than providing a single monolithic tool, it organizes multiple focused utilities into separate folders, each addressing specific system inspection or manipulation tasks. The tools are designed to work at depths that typical user-mode applications cannot reach, leveraging direct system calls and kernel-level techniques to expose or interact with Windows internals.
Developers and security researchers working on Windows systems should consider this collection if they need to perform advanced system inspection, reverse engineering, or security analysis that standard Windows APIs do not expose. The project suits those comfortable reading C code and working with low-level system details, as each tool includes extensive inline documentation. The repository does not position itself against alternatives but rather presents itself as a collection of pragmatic solutions for specific deep-system problems.
The project maintains a modular structure where each tool is independently documented and can be compiled using the free version of Visual Studio. Development activity shows consistent addition of new tools and utilities addressing emerging research needs, with documentation provided both in individual readme files and through inline code comments. The maintainer provides supplementary educational content through external channels to support users in understanding and building the tools.
