Alternatives and similar repositories for ProcDumpEx

Users that are interested in ProcDumpEx are comparing it to the libraries listed below

• repnz / rpcmon
  RPC Monitor based on The ETW Microsoft-Windows-Rpc provider
  ☆24Updated 5 years ago
• lab52io / StealAllTokens
  This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…
  ☆55Updated 3 years ago
• V3ded / Blog-Lab
  Source files for my posts
  ☆16Updated last year
• whokilleddb / A-Study-in-Obfuscation
  A Study in Obfuscation: Analyzing the effect of various techniques to bypass AV engines
  ☆42Updated 2 years ago
• Q4n / SuperPriv
  从admin冲到TrustedInstaller
  ☆17Updated 2 years ago
• a7t0fwa7 / windows-ps-callbacks-experiments
  Files for http://deniable.org/windows/windows-callbacks
  ☆25Updated 4 years ago
• ewilded / PPID_spoof
  An example of how to spawn a process with a spoofed parent PID (Visual C++)
  ☆27Updated 6 years ago
• waleedassar / SyscallNumberFinder
  ☆33Updated 3 years ago
• bharadwajyas / ppdump-public
  Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…
  ☆22Updated 5 years ago
• aaaddress1 / knownDlls_Poison
  ☆26Updated 3 years ago
• h0li3 / mpengine_diskus
  参考taviso的代码逆向一下mpengine.dll
  ☆19Updated 2 years ago
• ReCryptLLC / CVE-2022-42045
  ☆39Updated last year
• wilszdev / GetTrustedInstallerShell
  impersonate trustedinstaller by fiddling with tokens
  ☆17Updated 3 years ago
• wafinfo / SyscallLoader
  SyscallLoader
  ☆11Updated 3 years ago
• y11en / PEBFake
  PEBFake(修改PEB 伪装当前进程路径、参数等)
  ☆51Updated 4 years ago
• passthehashbrowns / hook-integrity-checks
  ☆21Updated 4 years ago
• nblog / shellcode_execute
  ☆9Updated last year
• AlionGreen / apc-injection
  Process Injection: APC Injection
  ☆32Updated 4 years ago
• waleedassar / ALPC_CLIENT_SERVER
  Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.
  ☆21Updated 3 years ago
• splunk / PPLinject
  Inject unsigned DLL into Protected Process Light (PPL)
  ☆24Updated 3 weeks ago
• Fahersto / code_injection
  Implementation of several code injection techniques.
  ☆21Updated 3 years ago
• j0urney1 / BeaconEye_C
  ☆11Updated 3 years ago
• oxfemale / ComObjShellcodeLoader
  ComObject Shellcode Loader with fake return address
  ☆12Updated 3 years ago
• hasherezade / libpeconv_tpl
  A ready-made template for a project based on libpeconv.
  ☆48Updated 3 months ago
• DamonMohammadbagher / ETWNetMonv3
  ETWNetMonv3 is simple C# code for Monitoring TCP Network Connection via ETW & ETWProcessMon/2 is for Monitoring Process/Thread/Memory/Ima…
  ☆39Updated 2 years ago
• AzAgarampur / byeintegrity4-uac
  Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers
  ☆18Updated 3 years ago
• Cerbersec / NtCreateUserProcess
  ☆12Updated 3 years ago
• oXis / DoublePulsarPayload
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆30Updated 3 years ago
• Yaxser / Itaskhandler
  Implementation of ITaskHandler in C++
  ☆13Updated 2 years ago
• bananabr / Givemeahand
  A PoC tool for exploiting leaked process and thread handles
  ☆31Updated last year