jborean93 / PSDetour-Hooks

Related projects ⓘ

Alternatives and complementary repositories for PSDetour-Hooks

• zodiacon / TaskSched
  ☆27Updated last year
• DebugPrivilege / WindowsAP1
  Code samples that serve as references for Windows API functions
  ☆12Updated 5 months ago
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆14Updated 4 months ago
• jborean93 / PSDetour
  Windows Detour Hooking in PowerShell
  ☆72Updated 5 months ago
• SadProcessor / EzETW
  Cmdlets for capturing Windows Events
  ☆13Updated 2 years ago
• gpoguy / setpol
  Lets you write arbitrary registry entries to Group Policy related .pol files (e.g. registry.pol)
  ☆11Updated 5 years ago
• decoder-it / CreateTokenExample
  ☆16Updated 5 years ago
• rbmm / PPL
  run process as PPL Antimalware
  ☆11Updated last year
• idnahacks / NetCeasePlusPlus
  Takes the original idea of NetCease and adds functionality
  ☆24Updated 2 years ago
• jsecurity101 / MSFT_DriverBlockList
  Repository of Microsoft Driver Block Lists based off of OS-builds
  ☆39Updated 7 months ago
• xforcered / AdvSim.Cryptography
  Simple and sane cryptographic wrapper library.
  ☆26Updated last year
• jborean93 / LocalKdc
  Info on how to use Kerberos KDC on a non-domain joined host
  ☆37Updated 3 months ago
• thefLink / Hunt-Weird-ImageLoads
  Small tool to play with IOCs caused by Imageload events
  ☆37Updated last year
• skelsec / winacl
  Platform independent library for interfacing windows security descriptors
  ☆16Updated 2 months ago
• commial / LiveDiffAD
  AD Live changes viewer
  ☆35Updated last year
• RemiEscourrou / PowerShellMisc
  ☆35Updated 2 years ago
• rbmm / Services
  ☆18Updated last year
• Teach2Breach / NtCreateUserProcess_rs
  example using NtCreateUserProcess in rust
  ☆15Updated last week
• jsecurity101 / LDAPMon
  ☆44Updated last year
• tyranid / setsidmapping
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆23Updated 4 years ago
• pwndizzle / com-research
  Research into COM
  ☆19Updated 4 years ago
• Devolutions / pwsh-host-rs
  Rust PowerShell Hosting Library
  ☆15Updated 2 months ago
• RedSiege / CLM-Base64
  This project provides Base64 encoding and decoding functionality to PowerShell within Constrained Language Mode
  ☆22Updated 4 months ago
• MSAdministrator / PSRegistry
  A PowerShell module that uses the WIN_API to access the registry
  ☆13Updated 7 years ago
• Fleex255 / CustomShim
  Example/starter code for custom Windows application compatibility shims
  ☆31Updated 3 years ago
• thalpius / Microsoft-Defender-for-Identity-Encrypted-Password
  ☆35Updated 5 months ago
• lem0nSec / Alcatraz
  An example of Windows self-replicating malware.
  ☆10Updated last year
• skelsec / aiowinreg
  Registry hive parsing the async way
  ☆19Updated 2 months ago
• LethalSnake1337 / PE-Loader-exercise
  A simple PE loader.
  ☆25Updated last year