mandiant / win10_rekall

Related projects ⓘ

Alternatives and complementary repositories for win10_rekall

• mandiant / win10_auto
  ☆24Updated 5 years ago
• airbus-cert / etwbreaker
  An IDA plugin to deal with Event Tracing for Windows (ETW)
  ☆50Updated 2 years ago
• tyranid / DumpReparsePoints
  This is a simple tool to dump all the reparse points on an NTFS volume.
  ☆31Updated 4 years ago
• airbus-cert / ttd2mdmp
  Extract data of TTD trace file to a minidump
  ☆28Updated last year
• DimopoulosElias / Primitives
  ☆31Updated 4 years ago
• hasherezade / tag_converter
  ☆21Updated 3 years ago
• connormcgarr / Presentations
  ☆26Updated 3 weeks ago
• shamrockhoax / mazedecoder
  ☆28Updated 4 years ago
• mgeeky / HEVD_Kernel_Exploit
  Exploits pack for the Windows Kernel mode driver HackSysExtremeVulnerableDriver written for educational purposes.
  ☆63Updated 3 years ago
• waleedassar / SyscallNumberExtractor
  ☆24Updated 3 years ago
• n1ght-w0lf / QilingForMalwareAnalysis
  Code snippets for Qiling Tutorials
  ☆20Updated 4 years ago
• malware-kitten / shellcode_hashes
  A collection of shellcode hashes
  ☆17Updated 6 years ago
• gavz / awesome-windows-exploitation
  ☆20Updated 4 years ago
• therealdreg / windbgtocstruct
  Helper Script to convert a Windbg dumped structure (using the 'dt' command) into a C structure. It creates dummy structs for you if neede…
  ☆26Updated last year
• OsandaMalith / PESecInfo
  A simple tool to view important DLL Characteristics and change DEP and ASLR
  ☆45Updated 6 years ago
• polakow / WindowsBypassSMEP
  Example for PagedOut!
  ☆24Updated 5 years ago
• peterwintersmith / crystalaep
  Crystal Anti-Exploit Protection 2012
  ☆35Updated 4 years ago
• hasherezade / paramkit
  A small library helping to parse commandline parameters (for C/C++)
  ☆53Updated last year
• trailofbits / WinDbg-JS
  ☆24Updated last year
• Dump-GUY / CAPA_JsonConver
  Converts exported results of CAPA tool from .json format to another formats supporting by different tools.
  ☆22Updated 2 years ago
• Dump-GUY / Python3---Binary-Data-Manipulation
  Python 3 - Manipulation and conversation with different data type (Bytes operations)
  ☆27Updated 2 years ago
• 7eRoM / elam
  A Practical example of ELAM (Early Launch Anti-Malware)
  ☆31Updated 3 years ago
• yardenshafir / CallbackObjectAnalyzer
  Dumps information about all the callback objects found in a dump file and the functions registered for them
  ☆34Updated 4 years ago
• hasherezade / hidden_bee_tools
  Parser for a custom executable format from Hidden Bee malware (first stage)
  ☆39Updated 2 months ago
• 0vercl0k / inject
  Yet another Windows DLL injector.
  ☆38Updated 3 years ago
• vp777 / exploit-dev
  ☆10Updated 2 years ago