Dump-GUY / Get-PDInvokeImports
Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke usage in assembly. Showing all locations from where they are referenced and Exports all to DnSpy_Bookmarks.xml
☆53Updated 2 years ago
Alternatives and similar repositories for Get-PDInvokeImports:
Users that are interested in Get-PDInvokeImports are comparing it to the libraries listed below
- Small tool to play with IOCs caused by Imageload events☆42Updated last year
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆32Updated 2 years ago
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆14Updated 7 months ago
- Recreating and reviewing the Windows persistence methods☆37Updated 3 years ago
- A C implementation of the Sektor7 "A Thief" Windows privesc technique.☆61Updated 2 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- Repository of Microsoft Driver Block Lists based off of OS-builds☆39Updated 10 months ago
- A Bumblebee-inspired Crypter☆80Updated 2 years ago
- ☆37Updated 3 years ago
- Manually perform syscalls without going through any external API or DLL.☆18Updated last year
- ☆59Updated 3 years ago
- List the ETW provider(s) in the registration table of a process.☆56Updated last year
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆72Updated last year
- SharpASM is a C# project that aims to automate ASM (i.e. shellcode) execution in .NET programs by exploiting code caves in RWX sections a…☆57Updated 2 years ago
- ☆18Updated last year
- yet another sleep encryption thing. also used the default github repo name for this one.☆70Updated last year
- miscellaneous codes☆35Updated last year
- ☆29Updated 2 months ago
- ☆36Updated 3 years ago
- Research into COM☆19Updated 5 years ago
- Enabled / Disable LSA Protection via BYOVD☆65Updated 3 years ago
- Winbindex bot to pull in binaries for specific releases☆45Updated last year
- ☆112Updated 2 years ago
- Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE☆65Updated last year
- ☆37Updated 2 years ago
- the Open Source and Pure C++ Packer for eXecutables☆18Updated last year
- ☆35Updated 8 months ago
- API Hammering with C++20☆45Updated 2 years ago
- Piece of code to detect and remove hooks in IAT☆62Updated 2 years ago