zodiacon / ALPCLoggerLinks
Log ALPC activity
☆84Updated last year
Alternatives and similar repositories for ALPCLogger
Users that are interested in ALPCLogger are comparing it to the libraries listed below
Sorting:
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆144Updated 6 years ago
- Run any executable as SYSTEM account (no service required)☆131Updated last year
- Advance LPC☆69Updated 8 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆51Updated 4 years ago
- windbg plugin for win32k debugging☆75Updated 5 years ago
- View handles and object for each object type☆65Updated 5 years ago
- Process Doppelgänging☆158Updated 7 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆97Updated 5 months ago
- 0CCh Windbg extension: include some useful commands☆112Updated last year
- Explore Job Objects on a Windows system☆84Updated 5 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆68Updated 5 years ago
- kernel pool windbg extension☆84Updated 9 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆106Updated 5 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆46Updated 4 years ago
- Simple 32/64-bit PEs loader.☆138Updated 6 years ago
- A command tree based on commands and extensions for Windows Kernel Debugging.☆108Updated 5 years ago
- This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…☆101Updated 2 years ago
- Hyper-V Research is trendy now☆181Updated last year
- Hyper-V scripts☆125Updated last week
- A simple API monitor for Windbg☆63Updated 8 years ago
- Windows RPC Python fuzzer☆162Updated 7 years ago
- Windbg extension to find PatchGuard pages☆121Updated 11 years ago
- Library that allows you to run 64bit code on a Wow64 32bit process☆146Updated 8 years ago
- Elevation of privilege detector based on HyperPlatform☆122Updated 8 years ago
- This is a sample that shows how to leverage SetThreadContext for DLL injection☆84Updated 7 years ago
- Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303☆110Updated 7 years ago
- ☆119Updated 4 years ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆202Updated last year
- Windbg2ida lets you dump each step in Windbg then shows these steps in IDA☆75Updated last year
- Reverse engineered source code of the autochk rootkit☆202Updated 5 years ago