Inter-binary control flow graphing
☆40Feb 25, 2026Updated 8 months ago
Alternatives and similar repositories for marco
Users that are interested in marco are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC tool to abuse windows server failover clusters☆59Aug 7, 2025Updated last year
- bof for interacting with WSL☆14Jan 8, 2026Updated 9 months ago
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 7 months ago
- A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analys…☆83Jul 31, 2026Updated 2 months ago
- An example MS-W32T client to show how to use midl.exe in a project managed by CMake☆11Feb 25, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Keep it secret, keep it safe☆77Feb 6, 2025Updated last year
- Tool that gathers a customizable set of ETW telemetry and generates user-defined detections☆56Jan 28, 2026Updated 9 months ago
- ☆14Jul 23, 2024Updated 2 years ago
- ☆10Mar 19, 2026Updated 7 months ago
- ☆13Feb 12, 2026Updated 8 months ago
- Serving payloads only to allowed processes using Windows projected file system feature☆26Feb 7, 2026Updated 8 months ago
- rpv-web is a browser based frontend for the rpv library☆28Nov 21, 2025Updated 11 months ago
- Thats it! An Open-Source Windows UEFI Rootkit☆42Jul 19, 2025Updated last year
- Backend development stack for agents☆15Jul 30, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…☆85Jan 19, 2026Updated 9 months ago
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 9 months ago
- SDK for automating Ghidra from Python, Rust, and C++. Decompile, rename, annotate, inspect symbols/types/xrefs, and manage project lifecy…☆188Oct 20, 2026Updated last week
- Leverages B64 chunks to split files and save to clipboard☆26Jul 30, 2026Updated 3 months ago
- One PsExec client to rule them all☆15Mar 25, 2026Updated 7 months ago
- Autonomous Windows POC developer from patchwatch diff reports☆161Jul 30, 2026Updated 3 months ago
- WinDbg plugin to trace module transitions from a debugged driver.☆54Dec 22, 2025Updated 10 months ago
- Patchestry is a binary patching framework built with MLIR and Ghidra.☆89Sep 18, 2026Updated last month
- An MCP server wrapping `kd.exe` for Windows kernel debugging☆17May 13, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An application to demonstrate stealing an AI model through knowledge distillation.☆11Dec 1, 2025Updated 10 months ago
- A lightweight Windows Prefetch file parser to extract programs' execution history☆75Jan 12, 2026Updated 9 months ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, wit…☆298Feb 21, 2026Updated 8 months ago
- ☆272Jun 7, 2025Updated last year
- Vectored Exception Handling Squared☆35Dec 27, 2025Updated 10 months ago
- mathematical proof that natural language is an inherently vulnerable medium - but that this dynamic which adds vulnerability is also is w…☆13Feb 12, 2026Updated 8 months ago
- Block Windows Defender by deny ACL☆92Jan 12, 2026Updated 9 months ago
- A simple speed reading application that supports .txt, .pdf, and image text extraction☆17Jun 17, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Source code for XTRIDE: "Practical Type Inference: High-Throughput Recovery of Real-World Structures and Function Signatures"☆25Jun 24, 2026Updated 4 months ago
- MAPS cloud scanner and response parser for Microsoft Defender research.☆96Feb 19, 2026Updated 8 months ago
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- Demos and presentation from SECArmy Village Grayhat 2020☆36Mar 15, 2023Updated 3 years ago
- A Ghidra extension for running Kotlin scripts☆16May 21, 2020Updated 6 years ago
- A Nemesis powered Retrieval-Augmented Generation (RAG) chatbot proof-of-concept.☆69Aug 4, 2025Updated last year
- A few examples of how to trap virtual memory access on Windows.☆41Dec 18, 2024Updated last year