Psinfo is a Volatility plugin which collects the process related information from the VAD (Virtual Address Descriptor) and PEB (Process Enivornment Block) and displays the collected information and suspicious memory regions for all the processes running on the system. This plugin should allow a security analyst to get the process related informa…
☆40Sep 24, 2016Updated 10 years ago
Alternatives and similar repositories for Psinfo
Users that are interested in Psinfo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Hollowfind is a Volatility plugin to detect different types of process hollowing techniques used in the wild to bypass, confuse, deflect …☆142Sep 29, 2022Updated 4 years ago
- Volatility plugin to search for all Autostart Extensibility Points (AESPs)☆10Jun 13, 2026Updated 4 months ago
- A couple of little tools I've made for working with Windows Drivers☆14Jan 18, 2016Updated 10 years ago
- ☆14Feb 27, 2017Updated 9 years ago
- Notes my learning steps about Windows-NT☆23May 18, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A c++, QT gui based memory engine☆13Mar 6, 2018Updated 8 years ago
- Ansible playbook to install cuckoo sandbox.☆11Mar 8, 2019Updated 7 years ago
- C code metamorphic obfuscator☆13Feb 20, 2015Updated 11 years ago
- PoC for detecting and dumping code injection (built and extended on UnRunPE)☆58Oct 23, 2018Updated 8 years ago
- My presentations from different conferences☆15Sep 12, 2018Updated 8 years ago
- Use WinDBG to trace the Windows API calls of any Portable Executable file☆32Apr 13, 2017Updated 9 years ago
- Mass Triage Tools☆20Sep 9, 2026Updated last month
- ☆12Feb 19, 2017Updated 9 years ago
- Simple PE packer with RtlCompressBuffer☆21Sep 20, 2015Updated 11 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A project that aims to automate Volatility3 at scale with the use of cloud strength and the power of KQL inside ADX.☆15Oct 11, 2026Updated 3 weeks ago
- Provides a multi-platform Graphical User Interface for hashlookup☆12Jul 12, 2024Updated 2 years ago
- Win32 Keyboard Layout Experiments☆20Mar 3, 2013Updated 13 years ago
- Obtain remote process cookies by performing a brute-force attack on ntdll.RtlDecodePointer using known pointer encodings.☆22May 31, 2017Updated 9 years ago
- Automatically exported from code.google.com/p/windbgshark☆12Nov 3, 2015Updated 11 years ago
- a binary x86win32 code obfuscator using virtual machine☆32Jan 8, 2017Updated 9 years ago
- Backdoor detection for VMware view☆13Jan 5, 2022Updated 4 years ago
- more at http://www.zer0mem.sk/?p=271☆12Jun 11, 2013Updated 13 years ago
- My manual analysis of malware families☆13Jul 12, 2017Updated 9 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Shellcode Of Death☆43Aug 31, 2013Updated 13 years ago
- Low-level MS Windows registry files analysis tools☆19May 5, 2016Updated 10 years ago
- Xenotix xBOT is a Cross Platform PoC Bot that abuse certain Google Services to implement it's C&C☆28Jun 18, 2018Updated 8 years ago
- Scripts and Modules for forensical analyses of mysql database systems☆23Sep 19, 2014Updated 12 years ago
- ☆23Jul 9, 2019Updated 7 years ago
- Generate RSA keys, encrypt and decrypt data☆23Apr 8, 2021Updated 5 years ago
- XunLei SDK☆16Apr 20, 2021Updated 5 years ago
- Vaccinating against WannaCry ransomware: a free tool by Minerva's research team☆24May 15, 2017Updated 9 years ago
- Open Source Rootkit☆23Jul 28, 2017Updated 9 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- go package for indexing and querying certain aspects of bgp dumps and some other things.☆13Mar 30, 2017Updated 9 years ago
- Invoke-Decoder – A PowerShell script to decode/deobfuscate malware samples☆18Aug 2, 2020Updated 6 years ago
- ☆30May 23, 2017Updated 9 years ago
- Learning volatility plugins.☆18Feb 16, 2021Updated 5 years ago
- A plugin for x64dbg for x86 emulation powered by the Unicorn-engine.☆30Dec 9, 2015Updated 10 years ago
- UAC 0Day all day!☆55Aug 15, 2017Updated 9 years ago
- digital signature with SHA256withRSA in Java☆10Jul 15, 2017Updated 9 years ago