skelsec / minidumpLinks
Python library to parse and read Microsoft minidump file format
☆297Updated last year
Alternatives and similar repositories for minidump
Users that are interested in minidump are comparing it to the libraries listed below
Sorting:
- Extract Windows Defender database from vdm files and unpack it☆469Updated 5 months ago
- Universal Unhooking☆326Updated 7 years ago
- Exploring RPC interfaces on Windows☆343Updated last year
- ☆306Updated 4 years ago
- Sysmon-Like research tool for ETW☆382Updated 3 years ago
- Expriments☆477Updated last year
- This is a simple example and explanation of obfuscating API resolution via hashing☆237Updated 5 years ago
- A Bind Shell Using the Fax Service and a DLL Hijack☆330Updated 5 years ago
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆635Updated 3 years ago
- Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in ord…☆191Updated 4 years ago
- Just another Windows Process Injection☆407Updated 5 years ago
- Yet another variant of Process Hollowing☆425Updated 5 months ago
- PoC for proxying COM objects when hijacking☆212Updated 6 years ago
- Leverage AMSI (Antimalware Scan Interface) technology to aid your analysis. This tool saves all buffers (scripts, .NET assemblies, etc) …☆111Updated 4 years ago
- This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System f…☆283Updated 5 years ago
- A more stealthy variant of "DLL hollowing"☆363Updated last year
- A meterpreter extension for applying hooks to avoid windows defender memory scans☆249Updated 5 years ago
- Demos of various (also non standard) persistence methods used by malware☆223Updated 2 years ago
- RPC Monitor tool based on Event Tracing for Windows☆382Updated last year
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆185Updated 8 months ago
- FLARE Kernel Shellcode Loader☆178Updated 6 years ago
- FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!☆352Updated 3 years ago
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆587Updated 2 years ago
- The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).☆235Updated last year
- Quickly debug shellcode extracted during malware analysis☆623Updated 2 years ago
- A Cross-Platform C++ parser library for Windows user minidumps with Python 3 bindings.☆224Updated 3 months ago
- A way to delete a locked file, or current running executable, on disk.☆615Updated 2 months ago
- ☆68Updated 3 years ago
- ETW Python Library☆293Updated 2 years ago
- Windows System Programming Experiments☆223Updated 3 years ago