repnz / rpcmon
RPC Monitor based on The ETW Microsoft-Windows-Rpc provider
☆24Updated 4 years ago
Alternatives and similar repositories for rpcmon:
Users that are interested in rpcmon are comparing it to the libraries listed below
- ☆33Updated 3 years ago
- 非涉密源码☆19Updated 10 months ago
- My try to implement a virtual CPU in C☆19Updated last year
- 参考taviso的代码逆向一下mpengine.dll☆19Updated 2 years ago
- A PoC tool for exploiting leaked process and thread handles☆30Updated 11 months ago
- Files for http://deniable.org/windows/windows-callbacks☆23Updated 4 years ago
- 从admin冲到TrustedInstaller☆17Updated last year
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆22Updated 4 years ago
- ☆26Updated 3 years ago
- This is a project to receive Base64 data and decode it in process☆15Updated 4 years ago
- Convert native dll to shellcode, and support exported function☆22Updated 3 years ago
- ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Ima…☆38Updated last year
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆39Updated 3 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆30Updated 4 years ago
- AppContainerBypass☆21Updated 3 years ago
- Unpacker for donut shellcode☆11Updated 4 years ago
- A kernel mode Windows rootkit in development.☆49Updated 3 years ago
- This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…☆56Updated 3 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Updated 2 years ago
- IAT-Obfuscation to make static analysis of executable harder.☆42Updated 3 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆43Updated 3 years ago
- ☆11Updated 2 years ago
- ☆12Updated 3 years ago
- Enumerate the DLLs/Modules using NtQueryVirtualMemory☆32Updated 9 years ago
- ☆50Updated 5 years ago
- Source files for my posts☆15Updated last year
- Yet another Windows DLL injector.☆38Updated 3 years ago
- A tool is used to infected a shellcode to PE file, the shellcode is packed at compile time and unpacked at runtime☆13Updated 4 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆47Updated 4 years ago