A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.
☆16Aug 26, 2026Updated 2 months ago
Alternatives and similar repositories for RPC-Triage
Users that are interested in RPC-Triage are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- asmsense: a small model that names and describes functions in stripped x86-64 binaries. Open dataset, baselines, and LoRA experiments.☆20Updated this week
- Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in sili…☆15Oct 14, 2026Updated 3 weeks ago
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆70Sep 23, 2026Updated last month
- A IDA CLI tool built on Rust, idalib-rs, and idalib. Supports batch and concurrent IDA analysis processes, design for stateless, agent fi…☆23Sep 15, 2026Updated last month
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Binary visualiser and triage tool — entropy, byte-class and Hilbert surfaces, dot plots and control-flow graphs over one shared address-s…☆10Aug 26, 2026Updated 2 months ago
- Malware analysis and Reverse Engineering Workshops from Invoke RE☆34Aug 17, 2026Updated 2 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆43Sep 20, 2026Updated last month
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- A DEX-to-JVM bytecode converter built to run the output: passes HotSpot's strict verifier, handles 64 KB+ methods and R8-minified apps, ~…☆17Updated this week
- Obfuscator obfuscate using pure java bytecode virtual machine to interpret mutated java bytecodes of original java program.☆54Sep 11, 2026Updated last month
- Escalating privilege in the system from unsigned driver using throttlestop vulnerability☆15Apr 17, 2026Updated 6 months ago
- ☆15Aug 19, 2026Updated 2 months ago
- Standalone zero-driver Windows system and API monitor in Rust☆26Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- No-open firmware exploit for the Wyze WLPA19CV2 color bulb☆14Sep 2, 2026Updated 2 months ago
- Deterministic PyGhidra extraction, triage, and local LLM compiler-backend pipeline for C reimplementation.☆11Oct 18, 2026Updated 3 weeks ago
- ☆53Oct 4, 2026Updated last month
- A unified, interactive reference for Living Off The Land Binaries (LOLBAS & GTFOBins). Features a dynamic payload builder (LHOST/LPORT), …☆20Sep 13, 2026Updated last month
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated last week
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆48Oct 18, 2026Updated 3 weeks ago
- ☆25Oct 27, 2026Updated last week
- ☆50Sep 17, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Java debugger & library which allows user and programmer to control remote JavaVMs☆41Aug 14, 2026Updated 2 months ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆48Aug 20, 2026Updated 2 months ago
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆25Oct 23, 2026Updated 2 weeks ago
- OneDrive as a covert C2 transport for Cobalt Strike☆78Sep 19, 2026Updated last month
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 9 months ago
- Sib is git-based (literally) llm client☆11Oct 5, 2026Updated last month
- Malware Anti-Analysis research. GPU-based obfuscation is designed to break emulation and sandboxes☆11Aug 29, 2026Updated 2 months ago
- NativePe: a PE loader/parser library for Delphi 12 (port of libpeconv, Win32 + Win64, open source)☆20Oct 1, 2026Updated last month
- ☆14Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Clean Indirect Syscalls with Syscall Tampering.☆52Oct 25, 2026Updated 2 weeks ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆22Sep 20, 2026Updated last month
- ☆72Jul 12, 2026Updated 3 months ago
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- Reboot-proof tmux: every session, layout and scrollback comes back, and Claude Code, Codex, Gemini CLI, opencode and pi reopen the conver…☆15Nov 2, 2026Updated last week
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆19Sep 21, 2026Updated last month
- ☆74Oct 27, 2026Updated last week