zodiacon / ALPCLogger
Log ALPC activity
☆80Updated last year
Related projects ⓘ
Alternatives and complementary repositories for ALPCLogger
- Run any executable as SYSTEM account (no service required)☆124Updated 6 months ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆136Updated 5 years ago
- File system minifilter driver for Windows to block symbolic link attacks.☆51Updated 3 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆89Updated 4 years ago
- Advance LPC☆59Updated 7 years ago
- ☆26Updated 6 years ago
- View handles and object for each object type☆63Updated 5 years ago
- windbg plugin for win32k debugging☆72Updated 5 years ago
- A command tree based on commands and extensions for Windows Kernel Debugging.☆105Updated 4 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆66Updated 4 years ago
- kernel pool windbg extension☆79Updated 9 years ago
- Process Doppelgänging☆154Updated 6 years ago
- Elevation of privilege detector based on HyperPlatform☆117Updated 7 years ago
- An command-line RPC method enumerator, born out of RPCView's awesomeness☆99Updated 5 years ago
- Explore Job Objects on a Windows system☆81Updated 5 years ago
- Windows RPC Python fuzzer☆157Updated 7 years ago
- A simple API monitor for Windbg☆62Updated 7 years ago
- This respository is a collection of C# class libraries which implement RPC clients for various versions of the Windows Operating System f…☆269Updated 4 years ago
- 0CCh Windbg extension: include some useful commands☆109Updated last year
- Command like tool to print mitigation flags for running processes in a memory dump☆44Updated 4 years ago
- A software driver that lets you log kernel-mode debug output into a file on Windows.☆97Updated 6 years ago
- Windbg extension to find PatchGuard pages☆117Updated 10 years ago
- Adding exceptions to Microsoft's Control Flow Guard (CFG)☆59Updated 8 years ago
- This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…☆98Updated 2 years ago
- Translates WinDbg "dt" structure dump to a C structure☆126Updated 8 years ago
- Helper idapython code for reversing kmdf drivers☆67Updated 2 years ago
- Library that allows you to run 64bit code on a Wow64 32bit process☆139Updated 7 years ago
- WinDbg debugger extension library providing various tools to analyse, dump and fix (restore) Microsoft Portable Executable files for both…☆81Updated 3 months ago
- Tools made for my Hyper-V blog series @ https://foxhex0ne.blogspot.com/☆54Updated 4 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆103Updated 4 years ago