skelsec / minidumpLinks
Python library to parse and read Microsoft minidump file format
☆299Updated last year
Alternatives and similar repositories for minidump
Users that are interested in minidump are comparing it to the libraries listed below
Sorting:
- Extract Windows Defender database from vdm files and unpack it☆473Updated 6 months ago
- Exploring RPC interfaces on Windows☆341Updated 2 years ago
- Universal Unhooking☆326Updated 7 years ago
- Sysmon-Like research tool for ETW☆384Updated 3 years ago
- This is a simple example and explanation of obfuscating API resolution via hashing☆238Updated 5 years ago
- Expriments☆479Updated last year
- Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in ord…☆191Updated 4 years ago
- PoC for proxying COM objects when hijacking☆213Updated 6 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆188Updated 9 months ago
- A way to delete a locked file, or current running executable, on disk.☆616Updated 3 months ago
- ☆306Updated 4 years ago
- A more stealthy variant of "DLL hollowing"☆363Updated last year
- A Bind Shell Using the Fax Service and a DLL Hijack☆331Updated 5 years ago
- Just another Windows Process Injection☆408Updated 5 years ago
- RPC Monitor tool based on Event Tracing for Windows☆383Updated last year
- This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System f…☆284Updated 5 years ago
- Windows System Programming Experiments☆223Updated 3 years ago
- Yet another variant of Process Hollowing☆426Updated 6 months ago
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆637Updated 3 years ago
- Kernel Exploits☆260Updated 4 years ago
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆587Updated 3 years ago
- Demos of various (also non standard) persistence methods used by malware☆224Updated 2 years ago
- FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!☆356Updated 3 years ago
- Events from all manifest-based and mof-based ETW providers across Windows 10 versions☆329Updated last year
- Tools for discovery and abuse of COM hijacks☆331Updated 6 years ago
- FLARE Kernel Shellcode Loader☆179Updated 6 years ago
- Managed assembly shellcode generation☆280Updated 4 years ago
- Tools for instrumenting Windows Defender's mpengine.dll☆311Updated 7 years ago
- Useful scripts for WinDbg using the debugger data model☆429Updated last year
- ☆138Updated 2 months ago