p0dalirius / volatility3-symbolsLinks
Memory mapping profiles for forensic analysis using volatility 3
☆28Updated 3 years ago
Alternatives and similar repositories for volatility3-symbols
Users that are interested in volatility3-symbols are comparing it to the libraries listed below
Sorting:
- Memory mapping profiles for forensic analysis using volatility 2☆50Updated 3 years ago
- ☆90Updated 2 years ago
- A collection of tools and detections for the Sliver C2 Frameworj☆131Updated 2 years ago
- MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.☆220Updated 2 years ago
- ☆185Updated 2 years ago
- The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.☆139Updated last year
- ☆148Updated last year
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆145Updated 9 months ago
- A small utility to translate NTDS.dit files to SQLite format.☆79Updated 2 years ago
- ☆233Updated 2 years ago
- Finding secrets in kernel and user memory☆115Updated 2 years ago
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆316Updated 2 years ago
- ☆160Updated 4 months ago
- ☆119Updated last year
- A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).☆93Updated 2 years ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆151Updated 2 months ago
- ☆301Updated last year
- bbs is a router for SOCKS and HTTP proxies. It exposes a SOCKS5 (or HTTP CONNECT) service and forwards incoming requests to proxies or ch…☆91Updated 4 months ago
- DPAPILAB Next Gen, script collection☆91Updated 3 years ago
- A cross platform library to write offensive and defensive security tools in Go☆121Updated last month
- Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting☆359Updated 2 years ago
- ☆137Updated last year
- Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762☆105Updated last year
- A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files …☆165Updated last year
- This repository contains a list of python scripts to work with Microsoft RPC for research purposes.☆50Updated 9 months ago
- ☆72Updated last year
- Local & remote Windows DLL Proxying☆165Updated last year
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆301Updated last week
- An interactive shell to spoof some LOLBins command line☆186Updated last year
- Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers☆124Updated last year