A C++ tool for process memory scanning & suspicious telemetry generation that attempts to detect a number of malicious techniques used by threat actors & those which have been incorporated into open-source user-mode rootkits.
☆88May 13, 2024Updated 2 years ago
Alternatives and similar repositories for ELFieScanner
Users that are interested in ELFieScanner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Load a dynamic library from memory using a fuse mount☆33Sep 15, 2023Updated 3 years ago
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Sep 20, 2024Updated 2 years ago
- A C++ PoC implementation for enumerating Windows Fibers directly from memory☆22May 11, 2024Updated 2 years ago
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- ☆12Aug 10, 2019Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Fragtunnel is a proof-of-concept (PoC) TCP tunnel tool that you can use to tunnel your application's traffic and bypass next-generation f…☆238May 13, 2026Updated 5 months ago
- An interactive CLI application for interacting with authenticated Jupyter instances.☆57May 7, 2025Updated last year
- Identify hardcoded secrets in static structured text (version 2)☆100Feb 5, 2025Updated last year
- ☆209May 10, 2026Updated 5 months ago
- Mobile Reconnaissance Framework is a powerful, lightweight and platform-independent offensive mobile security tool designed to help hacke…☆87Sep 18, 2026Updated 3 weeks ago
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- ☆43Nov 15, 2025Updated 10 months ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆154May 3, 2024Updated 2 years ago
- ☆12May 17, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- List the ETW provider(s) in the registration table of a process.☆79Sep 20, 2023Updated 3 years ago
- Tool created for Red Team to test default credentials on SSH and WinRM and then execute scripts with those credentials before the passwor…☆40May 7, 2023Updated 3 years ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆310Sep 18, 2024Updated 2 years ago
- To clean up your AWS AMIs: First, include AMIs by name or tag. Second, exclude AMIs in use, younger than N days, or the newest N images. …☆36Oct 5, 2026Updated last week
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆52Dec 31, 2024Updated last year
- Select any exported function in a dll as the new dll's entry point.☆82Oct 25, 2024Updated last year
- Read Chromium data (namely, cookies and local storage) straight from disk, without spinning up the browser.☆147May 7, 2025Updated last year
- A fully-undetectable ransomware that utilizes OneDrive & Google Drive to encrypt target local files☆127May 28, 2024Updated 2 years ago
- Tooling backed by an LLM for performing natural language searches against compiled target binaries. Search for encryption code, password …☆166Apr 10, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Win32 keylogger that supports all (non-ime using) languages correctly☆55Dec 21, 2023Updated 2 years ago
- Convert your shellcode into an ASCII string☆128Jun 27, 2025Updated last year
- ☆165Jul 31, 2022Updated 4 years ago
- Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…☆151Sep 21, 2024Updated 2 years ago
- Experimental Windows .text section Patch Detector☆23Jan 26, 2015Updated 11 years ago
- golang实现通过dcerpc和ntlmssp获取Windows远程主机信息☆29Apr 16, 2024Updated 2 years ago
- Semgrep-based Policy Controller for Kubernetes☆47Apr 4, 2025Updated last year
- RunPE adapted for x64 and written in C, does not use RWX☆28May 18, 2024Updated 2 years ago
- StoneKeeper C2, an experimental EDR evasion framework for research purposes☆205Dec 25, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Exploit targeting NT kernel in 24H2 Windows Insider Preview☆154Apr 26, 2024Updated 2 years ago
- Intelligence and Reconnaissance Package/Bundle installer.☆28Nov 11, 2020Updated 5 years ago
- AHHHZURE is an automated deployment script that creates a vulnerable Azure cloud lab for offensive security practitioners and enthusiasts…☆106Apr 22, 2024Updated 2 years ago
- miscellaneous codes☆38Sep 24, 2023Updated 3 years ago
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆167Mar 26, 2025Updated last year
- ☆19Jan 31, 2025Updated last year
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year