repnz / rpcmon
RPC Monitor based on The ETW Microsoft-Windows-Rpc provider
☆24Updated 5 years ago
Alternatives and similar repositories for rpcmon:
Users that are interested in rpcmon are comparing it to the libraries listed below
- My try to implement a virtual CPU in C☆19Updated last year
- ☆33Updated 3 years ago
- iSwordSDK (Provide Powerful Kernel API For Ring3 Applications)☆15Updated 3 years ago
- 参考taviso的代码逆向一下mpengine.dll☆19Updated 2 years ago
- Files for http://deniable.org/windows/windows-callbacks☆25Updated 4 years ago
- ☆12Updated 3 years ago
- Source files for my posts☆16Updated last year
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Updated 3 years ago
- Convert native dll to shellcode, and support exported function☆22Updated 4 years ago
- 从admin冲到TrustedInstaller☆17Updated 2 years ago
- ☆26Updated 3 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆21Updated 5 years ago
- This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…☆57Updated 3 years ago
- 记录一下Windows下的Hook技巧☆11Updated 8 months ago
- Hide Port In Windows☆38Updated 5 months ago
- ☆9Updated last year
- A PoC tool for exploiting leaked process and thread handles☆30Updated last year
- A kernel mode Windows rootkit in development.☆48Updated 3 years ago
- Enumerate the DLLs/Modules using NtQueryVirtualMemory☆32Updated 9 years ago
- Implementation of several code injection techniques.☆20Updated 3 years ago
- ☆11Updated 2 years ago
- This is a project to receive Base64 data and decode it in process☆15Updated 5 years ago
- This is a random process injector, and more injection techniques will be added in the future.☆12Updated 4 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆40Updated 3 years ago
- ksc4cpp is a shellcode framework for windows kernel based on C++☆22Updated 2 years ago
- Yet another Windows DLL injector.☆38Updated 3 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆31Updated 4 years ago
- Add export function and convert exe to dll☆25Updated 4 years ago
- ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Ima…☆39Updated last year
- 关闭恶意驱动的文件和注册表保护☆12Updated 2 years ago