cloudbase / HyperVPCapExtLinks
Hyper-V virtual switch packet capturing extension with libpcap / Wireshark format
☆12Updated 11 years ago
Alternatives and similar repositories for HyperVPCapExt
Users that are interested in HyperVPCapExt are comparing it to the libraries listed below
Sorting:
- does reflective dll injection☆8Updated 11 years ago
- Windows registry files interactive viewer☆9Updated 8 years ago
- ☆10Updated 11 years ago
- ☆13Updated 7 years ago
- D00☆6Updated 4 years ago
- Common Malware Techniques☆13Updated 2 years ago
- Post-explotation Hacks☆14Updated 6 years ago
- it's a simple LKM rootkit.☆12Updated 8 years ago
- Windows device tree walker☆15Updated 6 years ago
- wow64 syscall filter☆13Updated 10 years ago
- Capture Webcam Reflective Dll☆8Updated 9 years ago
- IDA WhatAPIs PlugIn☆7Updated 9 years ago
- RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …☆10Updated 9 years ago
- Agent installed on node to launch IDA,Bindiff,... and send results to the server ( AutoDiffWeb )☆10Updated 9 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22Updated 8 years ago
- Vulnerable Windows Driver with exploits which were used for demonstration purposes on Hunting and exploiting bugs in kernel drivers prese…☆13Updated 12 years ago
- Library for Windows XML Event Log (EVTX) data types☆18Updated 9 months ago
- Framework complet d'analyse de malware☆12Updated 9 years ago
- C++ WinSock2 PCAP with RDI☆13Updated 8 years ago
- Analysis and Modification Tool for Executables☆17Updated 6 years ago
- This repository is a clne of the new cuckoo monitor where I added some stuff to get the calling address for every hooked API☆8Updated 9 years ago
- Remote execution tool☆14Updated 11 years ago
- 🐧 A simple kernel-level rootkit☆20Updated 9 years ago
- Notes my learning steps about Windows-NT☆23Updated 8 years ago
- Lists work items being queued currently.☆14Updated 10 years ago
- Yet Another Repetitive Rootkit☆9Updated 12 years ago
- A library for interacting with Windows process memory☆7Updated 6 years ago
- Legal access: The driver and console app to demonstrate the basic memory access in kernel mode☆9Updated 7 years ago
- Zerokit shared code☆16Updated 6 years ago
- Demonstrate the new FileDispositionInfoEx behavior☆14Updated 7 years ago