List the ETW provider(s) in the registration table of a process.
☆82Sep 20, 2023Updated 3 years ago
Alternatives and similar repositories for ETWListicle
Users that are interested in ETWListicle are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Lateral Movement via the .NET Profiler☆100Nov 21, 2024Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- Remotely Enumerate sessions using undocumented Windows Station APIs☆116Aug 21, 2024Updated 2 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- ☆127Sep 1, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆43Dec 1, 2025Updated 11 months ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆411Jan 11, 2026Updated 9 months ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 7 months ago
- ☆59Jun 10, 2026Updated 4 months ago
- The standard Go net.Conn interface using Azure Storage services as the transport layer.☆32Oct 26, 2026Updated last week
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM☆20Jul 19, 2025Updated last year
- Sleep Obfuscation☆45Oct 13, 2022Updated 4 years ago
- BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR☆76Feb 9, 2024Updated 2 years ago
- Windows Kernel Http Library☆19Mar 9, 2026Updated 7 months ago
- Cobalt Strike UDC2 implementation that provides an Slack C2 channel☆71Jan 5, 2026Updated 10 months ago
- ☆105Oct 7, 2023Updated 3 years ago
- C library for Diffie Hellman key exchange with Curve448 und Curve25519. Extracted from OpenSSL.☆11Jan 7, 2021Updated 5 years ago
- Library of BOFs to interact with SQL servers☆249Dec 3, 2025Updated 11 months ago
- A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user☆41Aug 15, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- An App Domain Manager Injection DLL PoC on steroids☆242Dec 14, 2023Updated 2 years ago
- Lateral movement with DCOM DLL hijacking☆185Jul 4, 2025Updated last year
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations☆164Mar 1, 2024Updated 2 years ago
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆310Jun 12, 2026Updated 4 months ago
- Simple EDR that injects a DLL into a process to place a hook on specific Windows API☆100Aug 27, 2023Updated 3 years ago
- Sysmon-Like research tool for ETW☆397Nov 15, 2022Updated 3 years ago
- ☆115Oct 10, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆90May 17, 2023Updated 3 years ago
- POC tool to convert CobaltStrike BOF files to raw shellcode☆219Nov 5, 2021Updated 5 years ago
- ☆141Jan 16, 2025Updated last year
- a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor☆109Mar 25, 2024Updated 2 years ago
- Slaying multi-language LLVM IR with obfuscation passes to achieve JIT execution☆145Updated this week
- .NET assembly loader with patchless AMSI and ETW bypass☆393Apr 19, 2023Updated 3 years ago
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆374May 24, 2022Updated 4 years ago