A command line process execution monitor for Windows.
☆17Sep 2, 2026Updated last month
Alternatives and similar repositories for WindowsExecutionMonitor
Users that are interested in WindowsExecutionMonitor are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Credential and sensitive-data exposure triage for file shares☆16Aug 8, 2026Updated 2 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Build guide for Red Teaming home lab. GOAD lab setup in Proxmox and pfSense, Operator/C2 and Redirectors.☆48Sep 26, 2026Updated 3 weeks ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Sep 27, 2026Updated 3 weeks ago
- Windows network scanner that finds AI/ML services and MCP servers on your network (shadow AI discovery). Signed, self-updating detection …☆39Updated this week
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆110Oct 11, 2026Updated last week
- open-source pentest management built to be operated by an AI agent☆28Sep 1, 2026Updated last month
- How to Register your own AV with Defender☆37Aug 27, 2026Updated last month
- AI harness for long-running code audits, web pentests, and bug bounty hunting, built around how real investigations fail: anchored hypoth…☆28Updated this week
- Application-scoped Windows network brownouts in native C and BOF form☆22Aug 18, 2026Updated 2 months ago
- Modified BloodHound.py CE ingestor for red team use. Obfuscates LDAP through ldapx, paces LDAP searches and host RPC, and resumes a stopp…☆88Oct 10, 2026Updated last week
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Sep 11, 2026Updated last month
- The only OSCP preparation repository you need: notes, tooling, reporting, prep-list, methodology, and security resources.☆56Jun 13, 2026Updated 4 months ago
- Command and control framework☆40Jun 20, 2026Updated 4 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A practical client for ADWS in Golang.☆56Aug 5, 2026Updated 2 months ago
- Authenticode signature manipulation toolkit for Red Team operations and security research. Covers signature stealing, metadata cloning, S…☆140Aug 13, 2026Updated 2 months ago
- FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting.☆22May 5, 2025Updated last year
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled…☆88Aug 29, 2026Updated last month
- Map your path from a low-priv user to roo, like BloodHound, for local Linux privesc.☆173Jul 31, 2026Updated 2 months ago
- Extract PRT cookies remotely with InteractiveToken Scheduled Tasks☆34Aug 13, 2026Updated 2 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- AI red-teaming tool and LLM security framework to evaluate agentic AI applications. Tests prompt injections, handles vulnerability assess…☆65Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- ☆19Sep 1, 2025Updated last year
- The self-hosted KQL query management platform for SOC teams☆22May 20, 2026Updated 5 months ago
- This repo has a collection of scripts and exploits for OSCP-style labs. It covers enumeration, exploitation, web testing, and reverse she…☆36Aug 20, 2026Updated 2 months ago
- SoK/Whitepaper on Offensive Operations against Active Directory Certificate Service☆31Aug 29, 2026Updated last month
- WINFLESHER v2.0 - ATTACK SURFACE SECURITY FRAMEWORK☆26Sep 21, 2026Updated 3 weeks ago
- Novel lateral movement and privilege escalation tool leveraging PowerShell named pipes. Allows for executing PowerShell commands over the…☆25Oct 8, 2026Updated last week
- Tools for CES abuse☆48Sep 29, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆43Sep 9, 2026Updated last month
- ☆21Sep 11, 2026Updated last month
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 4 months ago
- ☆15Sep 29, 2024Updated 2 years ago
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆114Oct 6, 2026Updated 2 weeks ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆47Aug 20, 2026Updated 2 months ago
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆70Sep 23, 2026Updated 3 weeks ago