ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detection by VirtualMemAlloc Events (in-memory) etc.
☆39Jun 6, 2023Updated 3 years ago
Alternatives and similar repositories for ETWNetMonv3
Users that are interested in ETWNetMonv3 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detecti…☆322Mar 20, 2024Updated 2 years ago
- ☆16Mar 1, 2019Updated 7 years ago
- ☆23Jul 9, 2019Updated 7 years ago
- ☆25Mar 3, 2019Updated 7 years ago
- Easily hook WIN32 x64 functions☆18Feb 19, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An open source GPU monitoring tool written in C++ and C#. Not meant as a replacement for Fraps but designed to be used by developers and …☆12Feb 9, 2018Updated 8 years ago
- ☆51Sep 18, 2020Updated 6 years ago
- ProcessHollowing via csharp☆12Dec 21, 2021Updated 4 years ago
- x64HOOK库☆16Jan 14, 2020Updated 6 years ago
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- Brand New Code Injection for Windows https://breakingmalware.com/injection-techniques/atombombing-brand-new-code-injection-for-windows☆18Oct 29, 2016Updated 9 years ago
- Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets☆46Aug 4, 2021Updated 5 years ago
- A PoC designed to bypass all usermode hooks in a WoW64 environment.☆145Sep 16, 2020Updated 6 years ago
- Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction wit…☆217Feb 20, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆73Oct 24, 2021Updated 5 years ago
- Tiny driver patch to allow kernel callbacks to work on Win10 21h1☆33Feb 7, 2022Updated 4 years ago
- 新的注入方式☆11Sep 30, 2018Updated 8 years ago
- ☆11Dec 28, 2021Updated 4 years ago
- Windows Server 2K3 NT 5☆12Apr 17, 2021Updated 5 years ago
- findLoop - find possible encryption/decryption or compression/decompression code☆29Mar 30, 2019Updated 7 years ago
- All Nt Syscall and W32k Syscall in one asm, include, and call it!☆58Nov 4, 2021Updated 4 years ago
- intel vt-x hypervisor ept☆24May 19, 2020Updated 6 years ago
- My manual analysis of malware families☆13Jul 12, 2017Updated 9 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Simple tool to check whether a website is clickjackable☆12Mar 28, 2021Updated 5 years ago
- C# program to take a full size screenshot or a recording of the user's desktop. Takes in 0-3 flags☆84Oct 2, 2020Updated 6 years ago
- vmware-backdoor☆33Jul 11, 2021Updated 5 years ago
- Yet another windows syscall library☆18Jun 22, 2020Updated 6 years ago
- Offensive RPC PoC☆90Sep 29, 2021Updated 5 years ago
- Windows Server 2K3 NT 5☆12Apr 14, 2021Updated 5 years ago
- I used this to see if an EDR is running in Safe Mode☆33Feb 13, 2021Updated 5 years ago
- Fake SMB and SAMR data☆12Oct 27, 2019Updated 7 years ago
- it can extract functions from .dll, .exe, .sys and it be work! :)☆40Jun 11, 2019Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Process inject technique "Thread hijacking" via csharp☆16Dec 18, 2021Updated 4 years ago
- ☆14Jul 28, 2018Updated 8 years ago
- ☆14Jun 2, 2024Updated 2 years ago
- Sysmon-Like research tool for ETW☆397Nov 15, 2022Updated 3 years ago
- My experience using Windows API for offensive purposes☆17Jul 10, 2021Updated 5 years ago
- Security product hook detection☆324Mar 30, 2021Updated 5 years ago
- x64 assembler library☆31Jun 7, 2024Updated 2 years ago