The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from the ConDrv. ConDrv is a device created by condrv.sys, which handles the traffic between the Console Application (cmd/powershell/etc) and the actual console (conhost.exe).
☆42Sep 6, 2022Updated 4 years ago
Alternatives and similar repositories for mimikatz-detector-condrv
Users that are interested in mimikatz-detector-condrv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 4 years ago
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆20Jul 9, 2022Updated 4 years ago
- An command-line RPC method enumerator, born out of RPCView's awesomeness☆106Jul 31, 2019Updated 7 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- stl-like algorithms for TYPES☆31Oct 27, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- My research into the Windows UCPD☆17Jul 28, 2026Updated 3 months ago
- ☆18Mar 1, 2021Updated 5 years ago
- very simple masm64 example to demonstrate how to compile MASM 64 bit using NMake/CMake☆14Aug 23, 2022Updated 4 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Aug 12, 2022Updated 4 years ago
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- C++20 library for binary serialization of arbitrary aggregates or tuples. The library also unifies work with tuples and aggregates☆14Feb 26, 2022Updated 4 years ago
- A WinDbg extension to trace COM interactions☆132Aug 14, 2025Updated last year
- ☆115Oct 10, 2022Updated 4 years ago
- Custom LaTeX template and document class, that provide proper GOST 7.32-2017 formatting☆10May 17, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆17Dec 21, 2023Updated 2 years ago
- Files for http://deniable.org/windows/windows-callbacks☆26Jul 9, 2020Updated 6 years ago
- ☆84Aug 26, 2024Updated 2 years ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- Experimental Windows .text section Patch Detector☆23Jan 26, 2015Updated 11 years ago
- Ludus role for deploying a Mythic Teamserver onto Linux servers☆24Mar 16, 2025Updated last year
- An attempt at reversing WindowsDefender☆19Oct 6, 2024Updated 2 years ago
- ☆36Oct 26, 2023Updated 3 years ago
- An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.☆54Mar 3, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Enumerate various traits from Windows processes as an aid to threat hunting☆197Jan 13, 2022Updated 4 years ago
- Minimalistic C++ Reflection Library☆12May 2, 2025Updated last year
- Example implementation of coroutine in C☆22Sep 11, 2020Updated 6 years ago
- ☆37May 8, 2022Updated 4 years ago
- Library and tools to access the Common Log File System (CLFS)☆24Oct 11, 2026Updated 2 weeks ago
- ☆60Jan 9, 2023Updated 3 years ago
- Lightweight iterators for various sets where the elements are computed on demand.☆21Sep 25, 2016Updated 10 years ago
- Nim-IDA-FLIRT-Generator☆20Dec 5, 2023Updated 2 years ago
- POC For CVE-2022-24483☆13Apr 12, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆49May 12, 2021Updated 5 years ago
- Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html☆143May 10, 2022Updated 4 years ago
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 3 years ago
- An optimized sample code for SHA256 and SHA512 using C intrinsic☆21May 31, 2020Updated 6 years ago
- ☆11Sep 30, 2023Updated 3 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Jan 6, 2024Updated 2 years ago