Alternatives and similar repositories for TPM-Sniffing:

Users that are interested in TPM-Sniffing are comparing it to the libraries listed below

• Wack0 / bitlocker-attacks
  A list of public attacks on BitLocker
  ☆266Updated 3 weeks ago
• lkarlslund / nifo
  Nuke It From Orbit - remove AV/EDR with physical access
  ☆254Updated 3 months ago
• en4rab / SPITkey
  Decrypt the bitlocker FVEK for a bitlocker encrypted drive.
  ☆26Updated 2 months ago
• AmberWolfCyber / NachoVPN
  A delicious, but malicious SSL-VPN server 🌮
  ☆211Updated 3 months ago
• p0dalirius / ExtractBitlockerKeys
  A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.
  ☆366Updated last month
• 0xsyr0 / vx-underground-wordlist
  Wordlist to crack .zip-file password
  ☆201Updated 2 years ago
• stacksmashing / LPCClocklessAnalyzer
  A Saleae Analyzer for TPM traffic that only requires the LADD & LFRAME signals, no clock.
  ☆134Updated last year
• floesen / EventLogCrasher
  ☆186Updated last year
• OtterHacker / Conferences
  ☆296Updated 4 months ago
• hackerhouse-opensource / Marble
  The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.
  ☆291Updated last year
• MaLDAPtive / Invoke-Maldaptive
  MaLDAPtive is a framework for LDAP SearchFilter parsing, obfuscation, deobfuscation and detection.
  ☆264Updated 7 months ago
• NoInitRD / Memory-Dump-UEFI
  Memory-Dump-UEFI is a UEFI application for dumping the contents of RAM.
  ☆143Updated last month
• ArtemBaranov / WindowsRootkitsGuide
  ☆64Updated last month
• awakecoding / wireshark-rdp
  Wireshark RDP resources
  ☆210Updated last month
• stacksmashing / pico-tpmsniffer
  A simple, very experimental TPM sniffer for LPC bus
  ☆583Updated 11 months ago
• hackerhouse-opensource / WMIProcessWatcher
  A CIA tradecraft technique to asynchronously detect when a process is created using WMI.
  ☆132Updated last year
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆308Updated last year
• 7etsuo / win32-shellcode
  Win32 Shellcode CheatSheet: Your visual guide for crafting and understanding shellcode. Ideal for malware, and exploit developers
  ☆55Updated 6 months ago
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆120Updated last month
• dahvidschloss / PILOT
  Ping-based Information Lookup and Outbound Transfer
  ☆74Updated 10 months ago
• ExaTrack / Kdrill
  Python tool to check rootkits in Windows kernel
  ☆194Updated last week
• deepinstinct / NoFilter
  ☆296Updated 4 months ago
• hackerhouse-opensource / Stinger
  CIA UAC bypass implementation of Stinger that obtains the token from an auto-elevated process, modifies it, and reuses it to execute as A…
  ☆287Updated last year
• decoder-it / KrbRelayEx
  ☆297Updated 3 months ago
• PentHertz / RF-Swift
  🚀 A swifty RF toolbox baked for your needs, and it's multi-platform! 🌐✨ Available right now in for amd64 Linux & Windows, and with some…
  ☆171Updated last month
• 0xthirteen / Carseat
  Python implementation of GhostPack's Seatbelt situational awareness tool
  ☆254Updated 4 months ago
• Pennyw0rth / NetExec-Lab
  Lab used for workshop and CTF
  ☆174Updated last month
• Slowerzs / ThievingFox
  ☆531Updated 11 months ago
• trustedsec / specula
  ☆189Updated 5 months ago