p0dalirius / volatility3-symbolsLinks
Memory mapping profiles for forensic analysis using volatility 3
☆31Updated 3 years ago
Alternatives and similar repositories for volatility3-symbols
Users that are interested in volatility3-symbols are comparing it to the libraries listed below
Sorting:
- Memory mapping profiles for forensic analysis using volatility 2☆53Updated 3 years ago
- A collection of tools and detections for the Sliver C2 Frameworj☆133Updated 2 years ago
- Collection of my volatility3 plugins☆18Updated last year
- The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.☆142Updated last year
- Collection of Volatility2 profiles, generated against Linux kernels.☆54Updated 3 months ago
- ☆164Updated 7 months ago
- MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.☆225Updated 2 years ago
- Retrieve inner payloads from Donut samples☆116Updated 2 months ago
- A small utility to translate NTDS.dit files to SQLite format.☆82Updated 2 years ago
- ☆90Updated 2 years ago
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆146Updated last year
- A suite of tools to disrupt campaigns using the Sliver C2 framework.☆282Updated 2 years ago
- ☆189Updated 2 years ago
- Volatility, on Docker 🐳☆41Updated 2 months ago
- Windows symbol tables for Volatility 3☆92Updated last year
- DPAPILAB Next Gen, script collection☆93Updated 3 years ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆153Updated 5 months ago
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆181Updated 8 months ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆149Updated last year
- Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762☆106Updated last year
- ☆332Updated 5 months ago
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆319Updated 2 years ago
- ☆301Updated last year
- LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…☆143Updated last month
- An interactive shell to spoof some LOLBins command line☆188Updated 2 years ago
- PoCs of RCEs against open source C2 servers☆91Updated last year
- ☆120Updated 2 years ago
- https://lolad-project.github.io/☆84Updated last year
- Tools for analyzing EDR agents☆276Updated last year
- ☆229Updated 7 months ago