A console tool for inspecting Windows Ancillary Function Driver sockets
☆22May 15, 2025Updated last year
Alternatives and similar repositories for AfdSocketViewer
Users that are interested in AfdSocketViewer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Incident Response automation scripts☆16Sep 5, 2025Updated last year
- Understanding the operation and limitations of Sysmon's events☆25Sep 15, 2022Updated 4 years ago
- Source code and examples for PassiveAggression☆64Jun 6, 2024Updated 2 years ago
- Source code and examples for Antignis☆43Oct 21, 2022Updated 3 years ago
- Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows☆223Aug 12, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Some simple code to learn about how to access the Windows network stack using polling and \Device\Afd☆31Jun 20, 2024Updated 2 years ago
- Windows user mini-dump helper library to extract data from it.☆14May 17, 2025Updated last year
- Exploiting the KsecDD Windows driver through Server Silos☆86Nov 11, 2024Updated last year
- The Definitive Guide To Process Cloning on Windows☆558Jan 3, 2024Updated 2 years ago
- Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.☆77Jun 2, 2025Updated last year
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 6 months ago
- A terraform provider for chronicle☆15Sep 2, 2026Updated last month
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- A comprehensive technical guide with an in-depth analysis of the Windows process lifecycle, from initial user-mode API calls through kern…☆38Nov 26, 2025Updated 10 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆14Aug 26, 2026Updated last month
- Simulate per-process disconnection in red team environments☆116Jun 6, 2025Updated last year
- This is a collection of proof-of-concept exploits for various targets.☆42Jul 30, 2026Updated 2 months ago
- Just another .data pointer hook. This time it's hooking AfdIrpCallDispatch within Afd.sys☆12Feb 22, 2022Updated 4 years ago
- HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion☆68Apr 22, 2025Updated last year
- A Windows Named Pipe Multi-tool / Proxy☆375Dec 7, 2025Updated 10 months ago
- The lightweight library for Hyper-V guest interfaces.☆52Updated this week
- ☆54Dec 21, 2022Updated 3 years ago
- A cargo subcommand to build Rust with docker☆19Aug 24, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Cosmic Rowhammer - Crowdsourcing random bitflips for exploitation☆25Mar 18, 2026Updated 6 months ago
- Injecting code by recompiling shellcode into a ROP chain.☆148Apr 21, 2026Updated 5 months ago
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆89Sep 8, 2025Updated last year
- Serving payloads only to allowed processes using Windows projected file system feature☆25Feb 7, 2026Updated 8 months ago
- Intel 64/Windows low-level experiments☆118Sep 16, 2026Updated 3 weeks ago
- A basic Secure Virtual Machine hypervisor☆25Feb 25, 2021Updated 5 years ago
- LPE / RCE Exploits for various vulnerable "Bloatware" products☆90Aug 5, 2025Updated last year
- 👾 An incomplete v8 bytecode interpreter / virtual machine for a subset of instructions☆23Jan 30, 2026Updated 8 months ago
- ☆30Oct 13, 2020Updated 6 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆34Sep 22, 2017Updated 9 years ago
- A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes.☆286Sep 23, 2025Updated last year
- Proof of concept agentic solver for nfuncs from DEF CON Quals 2025☆24Apr 18, 2025Updated last year
- Undocumented BindFlt user mode API.☆19Mar 7, 2025Updated last year
- ☆42Feb 18, 2025Updated last year
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆86Dec 21, 2022Updated 3 years ago
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆88Jun 20, 2026Updated 3 months ago