Driver Initial Reconnaissance Tool
☆127Dec 26, 2019Updated 6 years ago
Alternatives and similar repositories for DIRT
Users that are interested in DIRT are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆133Sep 14, 2020Updated 5 years ago
- Antivirus Emulator Fingerprints☆30Oct 12, 2018Updated 7 years ago
- A fork of https://github.com/SafeBreach-Labs/pinjectra with a practical implementation of Stack Bombing☆28Oct 22, 2020Updated 5 years ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 12 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆116Feb 27, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- a simple intel vt code both support x86 & x64. PatchGuard monitor.☆76Oct 28, 2021Updated 4 years ago
- reverse engineering extension plugin for windbg☆123Sep 30, 2019Updated 6 years ago
- Corsair LL Access driver abuse☆25Apr 16, 2021Updated 5 years ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆439Aug 22, 2018Updated 7 years ago
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- ☆13May 1, 2018Updated 8 years ago
- ☆23May 28, 2021Updated 5 years ago
- Windows Kernel Drivers fuzzer☆379Mar 15, 2017Updated 9 years ago
- ☆409Mar 1, 2017Updated 9 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103May 14, 2020Updated 6 years ago
- Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.☆96Jul 7, 2020Updated 6 years ago
- An command-line RPC method enumerator, born out of RPCView's awesomeness☆108Jul 31, 2019Updated 7 years ago
- Three Tiny Examples of Directly Using Vista's NtCreateUserProcess☆90Nov 9, 2015Updated 10 years ago
- Enumerate and disable common sources of telemetry used by AV/EDR.☆854Mar 11, 2021Updated 5 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 6 years ago
- Silence EDRs by removing kernel callbacks☆238Dec 7, 2020Updated 5 years ago
- Hypervisor-based debugger☆191Dec 2, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Anti-AV compilation☆44Oct 4, 2013Updated 12 years ago
- NT AUTHORITY\SYSTEM☆43Jul 8, 2020Updated 6 years ago
- DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.☆383Jan 8, 2020Updated 6 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆44Dec 22, 2021Updated 4 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 5 years ago
- Incident Response & Digital Forensics Debugging Extension☆401Dec 11, 2018Updated 7 years ago
- Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.☆157Jun 10, 2019Updated 7 years ago
- Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.☆25Oct 25, 2020Updated 5 years ago
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303☆113Feb 25, 2018Updated 8 years ago
- A driver that hooks C: volume using symbolic link callback to track all FS access to the volume☆108Apr 24, 2020Updated 6 years ago
- Example code for using named pipe output with beacon ReflectiveDLLs☆118Jun 24, 2020Updated 6 years ago
- Windows (ShadowMove) Socket Duplication☆86Apr 19, 2020Updated 6 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Aug 29, 2021Updated 4 years ago
- Universal Unhooking☆325Sep 19, 2018Updated 7 years ago
- Research on Anti-malware and other related security solutions☆265Jul 25, 2020Updated 6 years ago