zodiacon / ALPCLoggerLinks
Log ALPC activity
☆84Updated 2 years ago
Alternatives and similar repositories for ALPCLogger
Users that are interested in ALPCLogger are comparing it to the libraries listed below
Sorting:
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆143Updated 6 years ago
- Process Doppelgänging☆161Updated 7 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆52Updated 4 years ago
- Run any executable as SYSTEM account (no service required)☆139Updated last year
- windbg plugin for win32k debugging☆75Updated 6 years ago
- Advance LPC☆70Updated 8 years ago
- Reverse engineered source code of the autochk rootkit☆206Updated 5 years ago
- Simple 32/64-bit PEs loader.☆138Updated 6 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆47Updated 5 years ago
- Windows RPC Python fuzzer☆163Updated 7 years ago
- Explore Job Objects on a Windows system☆81Updated 6 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆107Updated 8 months ago
- kernel pool windbg extension☆84Updated 10 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆104Updated 5 years ago
- codes for my blog post: https://secrary.com/Random/InstrumentationCallback/☆180Updated 7 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆65Updated 5 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆236Updated 5 years ago
- 0CCh Windbg extension: include some useful commands☆113Updated 2 years ago
- View handles and object for each object type☆64Updated 6 years ago
- Hyper-V Research is trendy now☆188Updated last year
- Elevation of privilege detector based on HyperPlatform☆122Updated 8 years ago
- A command tree based on commands and extensions for Windows Kernel Debugging.☆108Updated 5 years ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆206Updated last week
- ☆122Updated 5 years ago
- Helper idapython code for reversing kmdf drivers☆75Updated 3 years ago
- Retrieve pointers to undocumented kernel functions and offsets to members within undocumented structures to use in your driver by using t…☆63Updated 6 years ago
- Local privilege escalation PoC exploit for CVE-2019-16098☆198Updated 6 years ago
- Idapython script to carve binary for internal RPC structures☆239Updated last year
- ntoskrnl symbol pdb and undocument structures☆25Updated 7 years ago
- This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…☆103Updated 3 years ago