The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from the ConDrv. ConDrv is a device created by condrv.sys, which handles the traffic between the Console Application (cmd/powershell/etc) and the actual console (conhost.exe).
☆42Sep 6, 2022Updated 3 years ago
Alternatives and similar repositories for mimikatz-detector-condrv
Users that are interested in mimikatz-detector-condrv are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 3 years ago
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆20Jul 9, 2022Updated 4 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆68May 11, 2023Updated 3 years ago
- My research into the Windows UCPD☆17Jul 28, 2026Updated last month
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆18Mar 1, 2021Updated 5 years ago
- ☆16May 29, 2024Updated 2 years ago
- very simple masm64 example to demonstrate how to compile MASM 64 bit using NMake/CMake☆14Aug 23, 2022Updated 4 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆32Aug 12, 2022Updated 4 years ago
- Offline Active Directory Domain Services (AD DS) Join☆12Jan 4, 2017Updated 9 years ago
- Files for http://deniable.org/windows/windows-callbacks☆25Jul 9, 2020Updated 6 years ago
- Ludus role for deploying a Mythic Teamserver onto Linux servers☆23Mar 16, 2025Updated last year
- Experimental Windows .text section Patch Detector☆23Jan 26, 2015Updated 11 years ago
- An command-line RPC method enumerator, born out of RPCView's awesomeness☆108Jul 31, 2019Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆84Aug 26, 2024Updated 2 years ago
- ☆17May 1, 2026Updated 3 months ago
- A journal for $6,000 Riot Vanguard bounty.☆71Sep 22, 2023Updated 2 years ago
- ☆26Sep 29, 2022Updated 3 years ago
- ☆59Jan 9, 2023Updated 3 years ago
- ☆37Oct 26, 2023Updated 2 years ago
- An attempt at reversing WindowsDefender☆19Oct 6, 2024Updated last year
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD☆29Jan 4, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- List the ETW provider(s) in the registration table of a process.☆81Sep 20, 2023Updated 2 years ago
- Comparing, discussing, and bypassing various techniques for suspending and freezing processes on Windows.☆140Nov 10, 2021Updated 4 years ago
- A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR security solutions☆17Aug 26, 2025Updated last year
- stl-like algorithms for TYPES☆31Oct 27, 2023Updated 2 years ago
- ☆37May 8, 2022Updated 4 years ago
- Windows Kernel Programming Experiments☆84Sep 18, 2022Updated 3 years ago
- Notification webhook for GoPhish☆57Jun 10, 2024Updated 2 years ago
- Nim-IDA-FLIRT-Generator☆20Dec 5, 2023Updated 2 years ago
- ☆11Sep 30, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.☆56Mar 3, 2022Updated 4 years ago
- Automatically discover relationships between UEFI Settings and NVRAM variables☆17Jun 10, 2026Updated 2 months ago
- IOXIDResolver from AirBus Security/PingCastle☆52Nov 25, 2020Updated 5 years ago
- Mentally ill EtwTi parser☆74Jan 11, 2026Updated 7 months ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- Impersonate Tokens using only NTAPI functions☆86Apr 4, 2025Updated last year
- ☆49May 12, 2021Updated 5 years ago