Alternatives and similar repositories for ETWNetMonv3

Users that are interested in ETWNetMonv3 are comparing it to the libraries listed below

• DamonMohammadbagher / NativePayload_TiACBT

  View on GitHub
  NativePayload_TiACBT (Remote Thread Injection + C# Async Method + CallBack Functions Technique)
  ☆13Jun 6, 2023Updated 2 years ago
• DamonMohammadbagher / ETWProcessMon2

  View on GitHub
  ETWProcessMon2 is for Monitoring Process/Thread/Memory/Imageloads/TCPIP via ETW + Detection for Remote-Thread-Injection & Payload Detecti…
  ☆319Mar 20, 2024Updated last year
• dearfuture / WindowsHack

  View on GitHub
  ☆16Mar 1, 2019Updated 6 years ago
• zodiacon / AccessMask

  View on GitHub
  ☆20Jul 9, 2019Updated 6 years ago
• djhohnstein / CSharpCreateThreadExample

  View on GitHub
  C# code to run PIC using CreateThread
  ☆17Apr 19, 2019Updated 6 years ago
• N4kedTurtle / HellsGatePoC

  View on GitHub
  ☆51Sep 18, 2020Updated 5 years ago
• aaaddress1 / xlsKami

  View on GitHub
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆48Aug 4, 2021Updated 4 years ago
• dearfuture / DriverTutorial

  View on GitHub
  ☆25Mar 3, 2019Updated 6 years ago
• hackflame / winx64HookLib

  View on GitHub
  x64HOOK库
  ☆18Jan 14, 2020Updated 6 years ago
• tcpie / hook_any_x64

  View on GitHub
  Easily hook WIN32 x64 functions
  ☆18Feb 19, 2025Updated 11 months ago
• addrianyy / asmlib_x64

  View on GitHub
  x64 assembler library
  ☆31Jun 7, 2024Updated last year
• fashionproof / CheckSafeBoot

  View on GitHub
  I used this to see if an EDR is running in Safe Mode
  ☆36Feb 13, 2021Updated 5 years ago
• RedSiege / Screenshooter

  View on GitHub
  C# program to take a full size screenshot or a recording of the user's desktop. Takes in 0-3 flags
  ☆83Oct 2, 2020Updated 5 years ago
• VeroFess / X64SystemCall

  View on GitHub
  All Nt Syscall and W32k Syscall in one asm, include, and call it!
  ☆58Nov 4, 2021Updated 4 years ago
• 0xthirteen / FileWriter

  View on GitHub
  .NET project for writing files to local or remote hosts
  ☆43Jan 27, 2020Updated 6 years ago
• eshlomo1 / Azure-AD-Incident-Response

  View on GitHub
  Azure AD Incident Response
  ☆27Oct 8, 2021Updated 4 years ago
• fIappy / FpVTProject

  View on GitHub
  intel vt-x hypervisor ept
  ☆25May 19, 2020Updated 5 years ago
• passthehashbrowns / hiding-your-syscalls

  View on GitHub
  Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction wit…
  ☆218Feb 20, 2023Updated 2 years ago
• rasta-mouse / Fork-n-Run

  View on GitHub
  ☆73Oct 24, 2021Updated 4 years ago
• SweetIceLolly / Prevent_Process_Creation

  View on GitHub
  Record & prevent process creation in kernel mode
  ☆44Sep 14, 2021Updated 4 years ago
• secrary / findLoop

  View on GitHub
  findLoop - find possible encryption/decryption or compression/decompression code
  ☆26Mar 30, 2019Updated 6 years ago
• guibacellar / BisquillaRansomware

  View on GitHub
  The evolution of NxRansomware
  ☆11Jun 14, 2019Updated 6 years ago
• KernelPanic-OpenSource / Win2K3_NT_drivers

  View on GitHub
  Windows Server 2K3 NT 5
  ☆12Apr 14, 2021Updated 4 years ago
• rmdavy / HeapsOfFun

  View on GitHub
  AMSI Bypass Via the Heap
  ☆107Nov 20, 2020Updated 5 years ago
• XanthusSecurity / memparse

  View on GitHub
  ☆14Jan 18, 2020Updated 6 years ago
• D4rthMaulCop / DarthNetLoader

  View on GitHub
  ☆15Aug 17, 2023Updated 2 years ago
• kkent030315 / libinject

  View on GitHub
  A dll injector static library for Win x64 processes with handle elevation supported
  ☆12Mar 28, 2021Updated 4 years ago
• KernelPanic-OpenSource / Win2K3_NT_sdktools

  View on GitHub
  Windows Server 2K3 NT 5
  ☆12Apr 17, 2021Updated 4 years ago
• haidragon / processrefund

  View on GitHub
  新的注入方式
  ☆11Sep 30, 2018Updated 7 years ago
• mdegrazia / KAPE_Tools

  View on GitHub
  Tools and Binaries to use with KAPE
  ☆13Aug 13, 2019Updated 6 years ago
• limbenjamin / LogServiceCrash

  View on GitHub
  POC code to crash Windows Event Logger Service
  ☆27Oct 16, 2020Updated 5 years ago
• aaaddress1 / knownDlls_Poison

  View on GitHub
  ☆26Dec 29, 2021Updated 4 years ago
• kbsec / CS-501-2021

  View on GitHub
  ☆20Jan 28, 2022Updated 4 years ago
• RedTeamOperations / Detecting-Adversarial-Tradecrafts-Tools-by-leveraging-ETW

  View on GitHub
  CyberWarFare Labs hands-on workshop on the topic "Detecting Adversarial Tradecrafts/Tools by leveraging ETW"
  ☆51Mar 2, 2022Updated 3 years ago
• C485 / ReturnAddressHider

  View on GitHub
  Simple header only library to change return address on current stack frame.
  ☆22Sep 4, 2016Updated 9 years ago
• Kara-4search / EarlyBirdInjection_CSharp

  View on GitHub
  Inject shellcode into process via "EarlyBird"
  ☆26Aug 30, 2021Updated 4 years ago
• rvrsh3ll / CanaryServer

  View on GitHub
  Fake SMB and SAMR data
  ☆11Oct 27, 2019Updated 6 years ago
• veil-ivy / Utils

  View on GitHub
  collection of code snippets,windbg,python scripts and resources
  ☆14Jul 11, 2022Updated 3 years ago
• Kara-4search / ProcessHollowing_CSharp

  View on GitHub
  ProcessHollowing via csharp
  ☆13Dec 21, 2021Updated 4 years ago