An MCP to expose process monitoring and ETW tracing functionally to AI agents to assist in security work
☆87May 6, 2026Updated 5 months ago
Alternatives and similar repositories for ProcMon-MCP
Users that are interested in ProcMon-MCP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆28Oct 15, 2026Updated last week
- An Ansible collection that installs an ADFS deployment with optional configurations.☆48May 23, 2026Updated 5 months ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆14Jul 17, 2026Updated 3 months ago
- A Model Context Protocol (MCP) server that gives AI agents live, stateful Windows RPC attack-surface research, built on James Forshaw's N…☆16Sep 30, 2026Updated 3 weeks ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated 2 months ago
- Jailbreaker is a local evaluation tool for testing chatbot and agent-style systems against jailbreak, prompt-injection, and related failu…☆112Oct 2, 2026Updated 3 weeks ago
- Public talks, workshops and research presentations from BlackArrow☆28Jul 30, 2026Updated 2 months ago
- Ludus range for the Constructing Defense Lab☆139Jul 28, 2026Updated 2 months ago
- Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kern…☆73Oct 13, 2026Updated last week
- ☆52Jun 12, 2026Updated 4 months ago
- An MCP server for procmon☆59Aug 30, 2026Updated last month
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆112Jun 22, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆169Nov 2, 2025Updated 11 months ago
- DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.☆210Jun 25, 2026Updated 3 months ago
- An Ansible role that install the Adaptix C2 server and/or client on Debian based hosts☆178May 28, 2025Updated last year
- Memory API proxy via signed mozglue.dll☆41Jun 25, 2026Updated 3 months ago
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- "Service-less" driver loading☆192Nov 28, 2024Updated last year
- Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens☆254Mar 4, 2026Updated 7 months ago
- MalwareScan is a lightweight and fast malware scanner written in Python. It supports both Windows and Linux platforms and provides an ope…☆14Jun 2, 2025Updated last year
- Run TTPs, with AI!☆143Feb 23, 2026Updated 8 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆16May 3, 2024Updated 2 years ago
- MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.☆351Aug 7, 2024Updated 2 years ago
- Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. …☆57Sep 25, 2026Updated 3 weeks ago
- Windows named pipe hooking toolkit☆46Mar 20, 2026Updated 7 months ago
- A collector and derivation engine. It maps your environment, evaluates effective permissions and trust, and writes a complete attack grap…☆84Sep 15, 2026Updated last month
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆294Jun 22, 2026Updated 4 months ago
- ☆19Dec 25, 2025Updated 9 months ago
- A TUI for Active Directory collection.☆179Mar 17, 2026Updated 7 months ago
- Windows protocol library, including SMB and RPC implementations, among others.☆843Oct 5, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC☆441Sep 29, 2025Updated last year
- Scan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.☆50Jan 2, 2025Updated last year
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆285Jun 8, 2023Updated 3 years ago
- Source code for complete MALicious softWARE books I & II☆81Oct 10, 2025Updated last year
- rpv is a v library for analyzing RPC servers and interfaces on the Windows operating system☆39Oct 2, 2026Updated 3 weeks ago
- Collection of custom implementations or Userland Primitives about some WinAPI functions☆47Oct 5, 2026Updated 2 weeks ago
- Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSens…☆333Dec 31, 2025Updated 9 months ago