WinDivert detection and management
☆86Oct 22, 2019Updated 6 years ago
Alternatives and similar repositories for WinDivertTool
Users that are interested in WinDivertTool are comparing it to the libraries listed below
Sorting:
- Go bindings for WinDivert 2.x☆28Jan 4, 2025Updated last year
- A minimal .NET binding over WinDivert☆115Apr 24, 2022Updated 3 years ago
- Currently proof-of-concept☆17Dec 17, 2021Updated 4 years ago
- WinDivert: Windows Packet Divert☆3,105Mar 15, 2023Updated 3 years ago
- anti-ransomware file-system filter☆69Sep 3, 2024Updated last year
- POC for CVE-2023-29360☆12Aug 31, 2024Updated last year
- ☆33Jan 23, 2025Updated last year
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆460Aug 2, 2024Updated last year
- ☆15Jul 13, 2023Updated 2 years ago
- Identifies metadata of .NET binary files.☆21Apr 3, 2024Updated last year
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 2 years ago
- Demonstrate the new FileDispositionInfoEx behavior☆15Nov 6, 2017Updated 8 years ago
- Bindings for WinDivert in Go☆63Dec 29, 2018Updated 7 years ago
- A SigFlip implement in golang☆51Jan 5, 2022Updated 4 years ago
- An example code of CiGetCertPublisherName☆16Mar 24, 2022Updated 3 years ago
- A C2 framework built for my bachelors thesis☆57Jan 14, 2026Updated 2 months ago
- Citadel Core platform-specific implementation for Windows☆25Mar 8, 2022Updated 4 years ago
- Example of an ELF parser to learn about the ELF format☆11Oct 6, 2024Updated last year
- Detect Remote Local Credentials Dumping using a Shadow Snapshot☆32Jan 27, 2025Updated last year
- Simple command line tool to enumerate loaded WFP callout drivers☆10Feb 2, 2024Updated 2 years ago
- ☆22Dec 22, 2020Updated 5 years ago
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆123May 29, 2024Updated last year
- wfp2socks☆11Sep 11, 2025Updated 6 months ago
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated last year
- ☆23Feb 3, 2021Updated 5 years ago
- Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping☆69Oct 9, 2022Updated 3 years ago
- An improvement and a different approach to Mockingjay Self-Injection.☆35May 21, 2024Updated last year
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆18Jun 29, 2024Updated last year
- ☆35Dec 6, 2023Updated 2 years ago
- A layer that hide, redirect. forward, re-encrypt internet packet to keep VPN, Proxies and other p2p software hidden from Firewall. Free i…☆190Dec 4, 2018Updated 7 years ago
- ☆127Jan 23, 2025Updated last year
- Matryoshka loader is a tool that red team operators can leverage to generate shellcode for Microsoft Office document phishing payloads.☆43May 24, 2021Updated 4 years ago
- ☆10Jan 7, 2017Updated 9 years ago
- CVE-2024-30090 - LPE PoC☆108Oct 17, 2024Updated last year
- ☆25Jan 6, 2025Updated last year
- A simple UEFI bootkit made by @NSG650 and me.☆26Dec 29, 2024Updated last year
- Small toolkit for extracting information and dumping sensitive strings from Windows processes☆117Jul 17, 2024Updated last year
- This contains Helpful PYKD (Python Extension for Windbg) scripts☆49Mar 9, 2015Updated 11 years ago
- Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers☆126Sep 12, 2024Updated last year