avast / authenticode-parser
Authenticode-parser is a simple C library for Authenticode format parsing using OpenSSL.
☆16Updated 10 months ago
Alternatives and similar repositories for authenticode-parser:
Users that are interested in authenticode-parser are comparing it to the libraries listed below
- ☆18Updated 3 years ago
- Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…☆26Updated last year
- ☆27Updated 2 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆47Updated 4 years ago
- allowing um r/w through km from um ioctl ™☆12Updated 3 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆35Updated 4 years ago
- Support Windows OS Reversing by searching easily for references to functions across many DLLs☆34Updated 3 years ago
- ☆22Updated 3 years ago
- A set of small utilities, helpers for PIN tracers☆31Updated last year
- Code Integrity Violation Spotter☆17Updated 7 months ago
- Extract data of TTD trace file to a minidump☆28Updated last year
- File system minifilter driver for Windows to block symbolic link attacks.☆50Updated 4 years ago
- A POC for Windows Extension Host hooking☆22Updated 5 years ago
- A ready-made template for a project based on libpeconv.☆43Updated 2 months ago
- ☆24Updated last year
- ☆22Updated last year
- SoulExtraction is a windows driver library for extracting cert information in windows drivers☆21Updated last year
- arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system☆55Updated 3 years ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆28Updated 2 years ago
- WinXPSP2.Cermalus on stereoids, supporting all 32 bits Windows version. Windows Kernel Virus stuff for noobs☆17Updated last year
- Windows kernel PDB data parsed into YAML☆34Updated 2 months ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆33Updated 3 years ago
- Yet another Windows DLL injector.☆38Updated 3 years ago
- Data and structures regarding the research done on WdFilter☆13Updated 4 years ago
- Windows API Hashes used in the malwares☆40Updated 9 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆50Updated 2 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆60Updated 4 years ago
- ☆31Updated 4 years ago
- ☆19Updated 5 years ago