mtth-bfft / evtq
Windows eventlog formatting, live fetching and querying utility in C
☆18Updated 4 years ago
Alternatives and similar repositories for evtq
Users that are interested in evtq are comparing it to the libraries listed below
Sorting:
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆58Updated 2 years ago
- ☆36Updated 11 months ago
- Finds imports that could be exploited, still requires manual analysis.☆27Updated 2 years ago
- ☆45Updated last year
- MiniDump a process in memory with rust☆36Updated 3 years ago
- all credits go to @mgeeky☆64Updated 3 years ago
- Asynchronous RDP/VNC client for Python (GUI)☆71Updated 4 months ago
- a tiny program to consume from ETW providers for research☆47Updated 4 months ago
- A technique for Active Directory domain persistence☆39Updated last year
- Rust Implementation of SharpDllProxy for DLL Proxying Technique☆30Updated 2 years ago
- ☆12Updated 10 months ago
- Playing with PE's and Building Structures by Hand☆22Updated 3 years ago
- A collection of source code, binaries, and compilation scripts designed to bypass detection☆25Updated 2 years ago
- example using NtCreateUserProcess in rust☆19Updated 3 months ago
- Kerberos laboratory to better understand and then detecting attack on kerberos☆69Updated 3 years ago
- Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and en…☆41Updated 7 months ago
- Small tool to play with IOCs caused by Imageload events☆42Updated 2 years ago
- This is a repo for fetching Applocker event log by parsing the win-event log☆30Updated 2 years ago
- ☆36Updated last year
- Specialized tool to dump Position Independent Code.☆22Updated 4 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Updated 2 years ago
- An (WIP) EDR Evasion tool for x64 Windows & Linux binaries that utilizes Nanomites, written in Rust.☆19Updated 5 months ago
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆21Updated last year
- A work in progress BOF/COFF loader in Rust☆48Updated 2 years ago
- Simple HTTP async comms using standard GET/POST requests☆33Updated 2 months ago
- Registry hive parsing the async way☆21Updated 2 months ago
- Keep it secret, keep it safe☆77Updated 3 months ago
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆25Updated last year
- Quickly search for references to a GUID in DLLs, EXEs, and drivers☆74Updated 3 years ago
- PoCs and technical analysis of three vulnerabilities found on Cisco AnyConnect for Windows: CVE-2020-3433, CVE-2020-3434 and CVE-2020-343…☆43Updated 4 years ago