cloudbase / HyperVPCapExt
Hyper-V virtual switch packet capturing extension with libpcap / Wireshark format
☆12Updated 10 years ago
Related projects ⓘ
Alternatives and complementary repositories for HyperVPCapExt
- Windows registry files interactive viewer☆9Updated 7 years ago
- Windows device tree walker☆15Updated 6 years ago
- Tunnel IP through DNS for fun and profit (aka stealing hotel wifi)☆6Updated 3 months ago
- ☆9Updated 10 years ago
- Common Malware Techniques☆13Updated last year
- does reflective dll injection☆8Updated 10 years ago
- wow64 syscall filter☆13Updated 10 years ago
- ☆13Updated 7 years ago
- User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.☆18Updated 8 years ago
- F**k ssdt hook in np, tp, hs☆10Updated 10 years ago
- Legal access: The driver and console app to demonstrate the basic memory access in kernel mode☆9Updated 6 years ago
- A library for interacting with Windows process memory☆7Updated 6 years ago
- RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …☆10Updated 9 years ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Updated 6 years ago
- This repository is a clne of the new cuckoo monitor where I added some stuff to get the calling address for every hooked API☆8Updated 8 years ago
- Continuation of the popular patchdiff IDA plugin☆10Updated 10 years ago
- Hyper-V sockets☆25Updated 7 years ago
- Analysis and Modification Tool for Executables☆16Updated 5 years ago
- Notes my learning steps about Windows-NT☆22Updated 7 years ago
- DbgFlashVul☆12Updated 9 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆21Updated 7 years ago
- Kernel Shellcode to add all privileges in token☆13Updated 7 years ago
- IDA WhatAPIs PlugIn☆7Updated 9 years ago
- ☆13Updated 7 years ago
- ☆9Updated 7 years ago