Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich
☆21Jun 29, 2024Updated 2 years ago
Alternatives and similar repositories for ETWReader
Users that are interested in ETWReader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Some stuff for PHD2021☆14May 21, 2025Updated last year
- Two simple plugins for wireshark that can help in Network Forensics CTFs☆12Apr 21, 2025Updated last year
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- A tool to parse Windows Master File Table ($MFT) and import them into Elasticsearch.☆12Updated this week
- stack spoofing☆16Nov 15, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A C# process filter driver example which was implemented with the Process Filter Driver SDK. The Process Filter Driver SDK is a kernel-mo…☆14Sep 24, 2026Updated last month
- ECC Public Key Cryptography☆36Oct 29, 2023Updated 3 years ago
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 9 months ago
- ☆26Nov 8, 2024Updated last year
- ☆52Dec 5, 2025Updated 10 months ago
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆160Feb 10, 2025Updated last year
- a stage1 DLL loader with sleep obfuscation☆36Dec 27, 2022Updated 3 years ago
- ☆17Sep 7, 2017Updated 9 years ago
- A comprehensive technical guide with an in-depth analysis of the Windows process lifecycle, from initial user-mode API calls through kern…☆38Nov 26, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PoC for DEF CON 26: Playing Malware Injection with Exploit thoughts☆25Aug 17, 2018Updated 8 years ago
- Simple Python botnet.☆11Jul 8, 2022Updated 4 years ago
- ☆38Apr 15, 2025Updated last year
- List the ETW provider(s) in the registration table of a process.☆82Sep 20, 2023Updated 3 years ago
- Combining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider☆213Dec 6, 2022Updated 3 years ago
- ☆30Nov 7, 2022Updated 3 years ago
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- ☆27Dec 29, 2021Updated 4 years ago
- A simple proof-of-concept Windows syscall logger using the NT instrumentation callback mechanism.☆37Mar 6, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- One gate to all syscalls!☆23Mar 12, 2022Updated 4 years ago
- ☆122Jan 30, 2024Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 3 years ago
- User-mode implementation of HTTP.SYS. Implements HTTP 1.1 of the "HTTP Server API 2.0" for web servers☆46Feb 17, 2025Updated last year
- InstantCrack es un motor de recuperación de hashes de alto rendimiento diseñado para realizar búsquedas instantáneas en bases de datos pr…☆24Jan 19, 2026Updated 9 months ago
- P2P Communications of Named Pipes☆12Jul 30, 2026Updated 3 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61May 12, 2025Updated last year
- Blog personal sobre resolución de CTF's, artículos y demás cosas locas en ciberseguridad :)☆16May 15, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Loading and executing shellcode in C# without PInvoke.☆22Jan 10, 2022Updated 4 years ago
- Various WinDbg extensions and scripts☆36Sep 13, 2018Updated 8 years ago
- BlackHat Asia 2025 code and presentations☆17Apr 13, 2025Updated last year
- Demo code JavaScript POC that tricks user into sending Windows hash to responder☆37Dec 12, 2025Updated 10 months ago
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- ☆141Jan 16, 2025Updated last year
- Cloud subdomains identification tool☆62Apr 15, 2025Updated last year