The content of this repository aims to assist efforts on analysing inner working principles, functionalities, and properties of the Microsoft Windows operating system. This repository stores relevant documentation as well as executable files needed for conducting analysis studies.
☆153May 29, 2020Updated 6 years ago
Alternatives and similar repositories for Windows-Insight
Users that are interested in Windows-Insight are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repo contains code of JScript .NET which can be used as alternative to csc.exe to run potentially malicious code, which ships in all…☆12Nov 8, 2019Updated 6 years ago
- A repository of my presentations☆164Nov 16, 2023Updated 2 years ago
- Virtual Machine Introspection, Tracing & Debugging☆601Feb 22, 2022Updated 4 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- 🔵 Ethereum and BNB (BSC) Mev bot - Arbitrage☆366Mar 4, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.☆25Oct 25, 2020Updated 5 years ago
- Windbg extension that allows you analyze Control Flow Guard map☆38Oct 7, 2021Updated 5 years ago
- Call arbitrary Windows kernel-mode functions from Python on another machine☆46Sep 17, 2021Updated 5 years ago
- Will try to put here slides from now on when I give a talk☆24Oct 11, 2021Updated 4 years ago
- Automatic function exporting and linking for fuzzing cross-architecture binaries.☆51Sep 9, 2018Updated 8 years ago
- PeaceMaker Threat Detection is a Windows kernel-based application that detects advanced techniques used by malware.☆430May 22, 2020Updated 6 years ago
- CFB is a ProcMon-style tool designed to assist capturing IRPs sent to Windows drivers.☆338Mar 26, 2024Updated 2 years ago
- Mario & Luigi - Tools for sniffing Windows Named Pipes communication☆127Nov 15, 2016Updated 9 years ago
- Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.☆49Apr 9, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Demos and presentation from SECArmy Village Grayhat 2020☆36Mar 15, 2023Updated 3 years ago
- Dump of win32k POCs for bugs I've found☆380Mar 6, 2022Updated 4 years ago
- ☆11Jun 9, 2020Updated 6 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆38Oct 21, 2020Updated 5 years ago
- ReaCOM has got a lot of tools to use and is related to component object model☆72Feb 3, 2020Updated 6 years ago
- sploit☆66Dec 21, 2019Updated 6 years ago
- AppXSvc Arbitrary File Security Descriptor Overwrite EoP☆19Sep 15, 2019Updated 7 years ago
- Control Flow Guard Teleportation demo☆24Jul 28, 2019Updated 7 years ago
- ☆71Sep 30, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2019-0708 (BlueKeep)☆109Jul 7, 2020Updated 6 years ago
- Automate AV evasion by calling AMSI☆87May 31, 2023Updated 3 years ago
- ASLR bypass in Chrome version 77☆22Oct 28, 2019Updated 6 years ago
- A hypervisor for fuzzing built with WHVP and Bochs☆385Feb 5, 2019Updated 7 years ago
- PowerKrabsEtw is a PowerShell interface for doing real-time ETW tracing.☆102Nov 17, 2020Updated 5 years ago
- ☆16Apr 14, 2020Updated 6 years ago
- scripts/plugins for IDA Pro☆179Jan 10, 2025Updated last year
- B-Sides CBR 2018 talk about group policy and Grouper☆37May 3, 2019Updated 7 years ago
- IDAPro scripts/plugins☆94Feb 26, 2019Updated 7 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Documentation and supporting script sample for Windows Exploit Guard☆167Oct 2, 2026Updated last week
- Research on Windows Kernel Executive Callback Objects☆314Feb 22, 2020Updated 6 years ago
- UAC Bypass with mmc via alpc☆157Apr 5, 2019Updated 7 years ago
- ☆133Dec 15, 2019Updated 6 years ago
- Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.☆93Feb 24, 2019Updated 7 years ago
- ☆43Aug 30, 2018Updated 8 years ago
- ☆29Dec 4, 2018Updated 7 years ago