A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.
☆31Aug 12, 2026Updated 2 months ago
Alternatives and similar repositories for ALPC-Enumerator
Users that are interested in ALPC-Enumerator are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆16Aug 26, 2026Updated 2 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆165Jul 20, 2026Updated 3 months ago
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆135Sep 6, 2026Updated 2 months ago
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated 3 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆37May 19, 2026Updated 5 months ago
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- Abusing the win32k.sys kernel callback mechanism for arbitrary code execution☆121Apr 10, 2026Updated 6 months ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 8 months ago
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 7 months ago
- Parses cached certificate templates from a Windows Registry file and displays them in the same style as Certipy does☆100Jul 3, 2025Updated last year
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Intel 64/Windows low-level experiments☆119Sep 16, 2026Updated last month
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 9 months ago
- A lexer and parser for Sleep☆21Feb 20, 2026Updated 8 months ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Generate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.☆25Jul 11, 2026Updated 3 months ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated 2 months ago
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A few examples of how to trap virtual memory access on Windows.☆41Dec 18, 2024Updated last year
- ☆48Dec 28, 2025Updated 10 months ago
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆56Aug 26, 2026Updated 2 months ago
- Machine Learning Network Share Password Hunting Toolkit☆10Mar 8, 2023Updated 3 years ago
- ☆30Nov 22, 2023Updated 2 years ago
- A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering☆354Sep 21, 2026Updated last month
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Mythic Code Signing Wrapper☆19Oct 27, 2026Updated last week
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆90May 17, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Elfina is a multi-architecture ELF loader written in Rust, supporting x86 and x86-64 binaries.☆53Mar 15, 2026Updated 7 months ago
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 7 months ago
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 11 months ago
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 3 months ago
- SysTrace - Linux System Call Monitor using PTRACE API , It traces system calls, monitors process, file, network, and memory activity, det…☆25Sep 1, 2026Updated 2 months ago
- A synergized Visual Studio and Rust development environment☆18Jan 25, 2025Updated last year
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆77Dec 26, 2025Updated 10 months ago