tyranid / DumpReparsePoints
This is a simple tool to dump all the reparse points on an NTFS volume.
☆32Updated 4 years ago
Alternatives and similar repositories for DumpReparsePoints:
Users that are interested in DumpReparsePoints are comparing it to the libraries listed below
- ☆15Updated 4 years ago
- Crystal Anti-Exploit Protection 2012☆36Updated 4 years ago
- Windows x64 Process Scanner to detect application compatability shims☆37Updated 6 years ago
- ☆28Updated 3 months ago
- Win32k Elevation of Privilege PocUpdated 5 years ago
- Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.☆23Updated 4 years ago
- Dumps information about all the callback objects found in a dump file and the functions registered for them☆35Updated 4 years ago
- PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.☆57Updated 3 years ago
- ☆21Updated 4 years ago
- Will try to put here slides from now on when I give a talk☆24Updated 3 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆43Updated 3 years ago
- A small library helping to parse commandline parameters (for C/C++)☆54Updated last year
- ☆22Updated 4 years ago
- ☆31Updated 4 years ago
- ☆24Updated 5 years ago
- Rekall Memory Forensic Framework☆31Updated 5 years ago
- A tool for scanning registery key permissions. Find where non-admins can create symbolic links.☆46Updated 5 years ago
- A new binary injection technique, can easily go through any #CIG protected process and slip through all possible defenses without any inj…☆17Updated 6 years ago
- An command-line RPC method enumerator, born out of RPCView's awesomeness☆101Updated 5 years ago
- Script(s) to assist with the setup of WinDBG & mona.py on a Windows 10 VM☆26Updated 2 years ago
- Proof of Concept code for CVE-2020-0728☆46Updated 5 years ago
- ☆16Updated 3 years ago
- Resources from my journey into Windows binary exploitation☆22Updated 6 years ago
- ☆45Updated 6 years ago
- ReaCOM has got a lot of tools to use and is related to component object model☆74Updated 5 years ago
- ☆33Updated 7 years ago
- InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…☆31Updated 7 years ago
- A simple tool to view important DLL Characteristics and change DEP and ASLR☆44Updated 6 years ago
- PoC Code for CVE-2018-16712 (exploit by MmMapIoSpace)☆25Updated 6 years ago
- Master list of all my vulnerability discoveries. Mostly 3rd party kernel drivers.☆48Updated 4 years ago