An MCP server for procmon
☆53Aug 30, 2026Updated 2 weeks ago
Alternatives and similar repositories for ProcmonMCP
Users that are interested in ProcmonMCP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 5 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 6 months ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆32Sep 24, 2025Updated 11 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 5 months ago
- Radar2 live SQL AI connector for Vibe Reverse Engineering☆17Jul 31, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated last month
- Crystal Palace library for proxying Nt API calls via the Threadpool☆106Oct 18, 2025Updated 11 months ago
- A PICO for Crystal Palace that implements CLR hosting to execute a .NET assembly in memory.☆144Jan 28, 2026Updated 7 months ago
- Beacon Object File to Enable Chrome DevTools Protocol (CDP)☆128Aug 22, 2026Updated 3 weeks ago
- AntiVE-BehaviorWatch is an advanced behavioral analysis malware that detects automated analysis systems through real-time mouse movement …☆40Jul 12, 2026Updated 2 months ago
- ☆21Dec 9, 2025Updated 9 months ago
- A collection of useful API endpoints for security operators and administrators☆16Jan 8, 2026Updated 8 months ago
- A QoL tool to obfuscate shellcode.☆28Jun 2, 2026Updated 3 months ago
- Dockerized template to build CS BOFs using clang-cl☆25Jan 29, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- A cmake template for crystal palace☆47Dec 20, 2025Updated 8 months ago
- LinkedIn recon the easy way☆110Jul 3, 2025Updated last year
- An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clie…☆92May 3, 2026Updated 4 months ago
- Automated Pass-the-Ticket (PtT) attack. Standalone alternative to Rubeus and Mimikatz for this attack. In C#, C++, Crystal, Python, Rust,…☆156Aug 31, 2026Updated 2 weeks ago
- Ludus range for the Constructing Defense Lab☆137Jul 28, 2026Updated last month
- Hybrid Autonomous Logic Operator☆22Oct 9, 2025Updated 11 months ago
- ☆33Mar 26, 2026Updated 5 months ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆140Jan 17, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 7 months ago
- A tool to play with scheduled tasks on Windows, in Rust☆125Nov 1, 2025Updated 10 months ago
- Self-mutating macOS implant☆139Apr 18, 2026Updated 5 months ago
- Callstack spoofing using a VEH because VEH all the things.☆23Mar 18, 2025Updated last year
- ☆17Apr 21, 2026Updated 4 months ago
- Files for http://blog.deniable.org/posts/windows-callbacks/☆12Jan 1, 2023Updated 3 years ago
- ☆48Dec 21, 2025Updated 8 months ago
- A Python script for creating `.lnk` (shortcut) files with embedded encoded data and packaging them into ZIP archives.☆92Jan 8, 2025Updated last year
- VDM sig bypass and additional WinAPI stubs☆19Feb 16, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Tiny Windows executable that outputs version information about the OS.☆12Updated this week
- Linux Shared Library to Shellcode Loader☆102Feb 15, 2026Updated 7 months ago
- Payload Obfuscation for Red Teams workshop materials☆88Jun 8, 2026Updated 3 months ago
- A lexer and parser for Sleep☆21Feb 20, 2026Updated 6 months ago
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆46Aug 5, 2025Updated last year
- One-header configurable C++20 COFF loader☆20Jul 21, 2025Updated last year
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆37Aug 31, 2025Updated last year