cloudbase / HyperVPCapExt
Hyper-V virtual switch packet capturing extension with libpcap / Wireshark format
☆12Updated 10 years ago
Alternatives and similar repositories for HyperVPCapExt
Users that are interested in HyperVPCapExt are comparing it to the libraries listed below
Sorting:
- does reflective dll injection☆8Updated 11 years ago
- ☆10Updated 10 years ago
- Common Malware Techniques☆13Updated 2 years ago
- Windows device tree walker☆15Updated 6 years ago
- Windows registry files interactive viewer☆9Updated 8 years ago
- wow64 syscall filter☆13Updated 10 years ago
- Legal access: The driver and console app to demonstrate the basic memory access in kernel mode☆9Updated 7 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22Updated 7 years ago
- IDA WhatAPIs PlugIn☆7Updated 9 years ago
- EventList - the Baseline Event Analyzer☆11Updated 5 years ago
- Kernel Shellcode to add all privileges in token☆13Updated 8 years ago
- A tool evaluates security configurations of a given PE based on SDL without source code☆14Updated 10 years ago
- ☆13Updated 7 years ago
- Framework complet d'analyse de malware☆12Updated 9 years ago
- RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the …☆10Updated 9 years ago
- Demonstrate the new FileDispositionInfoEx behavior☆14Updated 7 years ago
- Malwarebytes Antivirus CVE☆8Updated 7 years ago
- an efficient yet easy to use network packet builder and parser☆11Updated 7 years ago
- ☆9Updated 7 years ago
- A library for interacting with Windows process memory☆7Updated 6 years ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Updated 6 years ago
- Static analysis tools for x86 assembly☆13Updated 8 years ago
- Library for Windows XML Event Log (EVTX) data types☆18Updated 7 months ago
- API logger plugin for Intel Pintool☆14Updated 7 years ago
- User-mode part of Zerokit platform☆20Updated 6 years ago
- D00☆6Updated 3 years ago
- ☆16Updated 7 years ago
- Lists work items being queued currently.☆14Updated 9 years ago
- This repository is a clne of the new cuckoo monitor where I added some stuff to get the calling address for every hooked API☆8Updated 9 years ago
- Continuation of the popular patchdiff IDA plugin☆10Updated 10 years ago