DebugPrivilege / InsightEngineeringLinks
Hardcore Debugging
☆903Updated 3 months ago
Alternatives and similar repositories for InsightEngineering
Users that are interested in InsightEngineering are comparing it to the libraries listed below
Sorting:
- Living Off The Land Drivers☆1,240Updated 3 weeks ago
- Important notes and topics on my journey towards mastering Windows Internals☆401Updated last year
- PoCs and tools for investigation of Windows process execution techniques☆932Updated last week
- EDR Lab for Experimentation Purposes☆1,316Updated 2 weeks ago
- ☆579Updated 2 months ago
- ☆1,682Updated 11 months ago
- Win32 and Kernel abusing techniques for pentesters☆957Updated last year
- SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…☆401Updated last month
- Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs☆764Updated last year
- Operating System Design Review: A systemic analysis of modern systems architecture☆317Updated 5 months ago
- A tool that shows detailed information about named pipes in Windows☆686Updated 8 months ago
- ☆500Updated last year
- Useful scripts for WinDbg using the debugger data model☆418Updated last year
- Centralized resource for listing and organizing known injection techniques and POCs☆594Updated 2 weeks ago
- A set of fully-undetectable process injection techniques abusing Windows Thread Pools☆1,144Updated last year
- This repo contains C/C++ snippets that can be handy in specific offensive scenarios.☆724Updated 6 months ago
- Spartacus DLL/COM Hijacking Toolkit☆1,050Updated last year
- The Definitive Guide To Process Cloning on Windows☆507Updated last year
- Project for tracking publicly disclosed DLL Hijacking opportunities.☆788Updated last week
- Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".☆682Updated 2 months ago
- A repository for additional files related to the book Windows Security Internals with PowerShell from No Starch Press.☆196Updated last year
- This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.☆511Updated last month
- Kernel mode WinDbg extension and PoCs for token privilege investigation.☆872Updated 6 months ago
- This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be…☆650Updated last year
- Dynamic unpacker based on PE-sieve☆744Updated 2 months ago
- Different learning materials☆227Updated 4 months ago
- A modern 32/64-bit position independent implant template☆1,240Updated 4 months ago
- View ETW Provider manifest☆520Updated 9 months ago
- A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities☆675Updated 9 months ago
- A tutorial on how to write a packer for Windows!☆284Updated last year