nccgroup / memgrepLinks
Memory searching utilities
☆42Updated 11 years ago
Alternatives and similar repositories for memgrep
Users that are interested in memgrep are comparing it to the libraries listed below
Sorting:
- A Generic Windows Memory Scraping Tool☆71Updated 8 years ago
- SilkETW & SilkService☆40Updated 5 years ago
- Environmental (and http) keying for scripting languages☆39Updated 6 years ago
- An offensive Powershell console☆30Updated 9 years ago
- A simple reflective dll example☆19Updated 8 years ago
- Various snippets created during malware analysis☆22Updated 7 years ago
- A repo to hold some scripts pertaining WMI (Windows implementation of WBEM) forensics☆86Updated 7 years ago
- Mimikatz HashClash☆12Updated 10 years ago
- Fileless SQL Server CLR-based Custom Stored Procedure Command Execution☆35Updated 8 years ago
- Ps1jacker is a tool for generating COM Hijacking payload.☆61Updated 5 months ago
- Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research☆53Updated 7 years ago
- Mixing up CVE and MS like a pro☆25Updated 8 years ago
- windows-operating-system-archaeology @Enigma0x3 @subTee☆46Updated 8 years ago
- Loads the AutoIt DLL and PowerShell assemblies into memory and executes the specified keystrokes☆61Updated 8 years ago
- This is a Python port of lnk-parse-1.0, a tool to parse Windows .lnk files.☆78Updated 2 years ago
- Kerberom is a tool aimed to retrieve ARC4-HMAC'ed encrypted Tickets Granting Service (TGS) of accounts having a Service Principal Name (S…☆36Updated 7 years ago
- This script is used for extracting DDE in docx and xlsx☆12Updated 7 years ago
- Python based module to find common vulnerabilities which lead to Windows privilege escalation☆32Updated 8 years ago
- Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit☆100Updated 6 years ago
- Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003☆20Updated 10 years ago
- Powershell script which will take any payload and put it in the a bat script which delivers the payload. The payload is delivered using e…☆53Updated last year
- ☆50Updated 7 years ago
- Materials for 44con 2014 CANAPE Workshop☆23Updated 10 years ago
- Web Filter External Enumeration Tool (WebFEET)☆77Updated 10 years ago
- Simple DDE object detector☆56Updated 7 years ago
- ☆83Updated 9 years ago
- ☆29Updated 8 years ago
- Talk given at DerbyCon and RuxCon 2016☆22Updated 8 years ago
- Parses Java Cache IDX files☆39Updated 7 years ago
- Emofishes is a collection of proof-of-concepts that help improve, bypass or detect virtualized execution environments (focusing on the on…☆15Updated 2 years ago