Alternatives and similar repositories for PS-MOTW

Users that are interested in PS-MOTW are comparing it to the libraries listed below

• joe-desimone / rep-research
  ☆79Updated last year
• WildByDesign / ACLViewer
  ACL Viewer for Windows
  ☆132Updated 8 months ago
• olafhartong / PockETWatcher
  a tiny program to consume from ETW providers for research
  ☆53Updated last year
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated last year
• nothingspecialforu / EvtPsst
  EvtPsst
  ☆55Updated 2 years ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated last year
• s4dbrd / ETWReader
  Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
  ☆17Updated last year
• CaptainNox / Hypnos
  A more reliable way of resolving syscall numbers in Windows
  ☆52Updated last year
• jonny-jhnson / LDAPMon
  ☆45Updated 2 years ago
• OtterHacker / Hooker
  ☆108Updated last year
• pulpocaminante / PPL-0day
  Demoting PPL anti-malware services to less than a guest user
  ☆65Updated 11 months ago
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆80Updated 2 years ago
• a7t0fwa7 / SymProcSleuth
  A pure C version of SymProcAddress
  ☆30Updated last year
• mannyfred / MentalTi
  Mentally ill EtwTi parser
  ☆67Updated 2 months ago
• 0xJs / EnumMitigations
  Reports on Driver, LSASS and other security services mitigations
  ☆33Updated 4 months ago
• Slowerzs / CryptDecryptMemory
  ☆31Updated last year
• bluefrostsecurity / Windows-Drive-Remapping-EoP
  ☆35Updated 2 years ago
• Crowdfense / CVE-2024-21338
  Windows AppLocker Driver (appid.sys) LPE
  ☆71Updated last year
• Karkas66 / CelestialSpark
  Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …
  ☆102Updated 9 months ago
• HullaBrian / COMmander
  .NET tool used to enrich RPC telemetry
  ☆101Updated 6 months ago
• OffenseTeacher / Steganim
  ☆47Updated 2 years ago
• jdu2600 / Get-InjectedThreadEx
  Fork of Get-InjectedThread - https://gist.github.com/jaredcatkinson/23905d34537ce4b5b1818c3e6405c1d2
  ☆48Updated 2 years ago
• jborean93 / AmsiProvider
  Test AMSI Provider implementation in C#
  ☆42Updated last year
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆64Updated last year
• rbmm / Hollowed-Process
  ☆30Updated 4 months ago
• bot984397 / eepy
  ☆38Updated 8 months ago
• Fitretech-Security / dylight
  macOS dylib stager
  ☆36Updated 11 months ago
• rbmm / SDD
  Self Delete DLL
  ☆23Updated last year
• Cipher7 / havoc-PoolParty
  Windows Thread Pool Injection Havoc Implementation
  ☆33Updated last year
• EvilBytecode / EvilByte-Remote-AMSI-Bypass
  Bypasses AMSI protection through remote memory patching and parsing technique.
  ☆54Updated 7 months ago