zodiacon / ALPCLoggerLinks
Log ALPC activity
☆85Updated 2 years ago
Alternatives and similar repositories for ALPCLogger
Users that are interested in ALPCLogger are comparing it to the libraries listed below
Sorting:
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆146Updated 6 years ago
- Reverse engineered source code of the autochk rootkit☆207Updated 6 years ago
- Process Doppelgänging☆162Updated 8 years ago
- Command like tool to print mitigation flags for running processes in a memory dump☆47Updated 5 years ago
- Run any executable as SYSTEM account (no service required)☆138Updated last year
- File system minifilter driver for Windows to block symbolic link attacks.☆52Updated 5 years ago
- Simple 32/64-bit PEs loader.☆138Updated 7 years ago
- An example of how x64 kernel shellcode can dynamically find and use APIs☆104Updated 5 years ago
- Windows RPC Python fuzzer☆164Updated 8 years ago
- windbg plugin for win32k debugging☆75Updated 6 years ago
- Advance LPC☆72Updated 8 years ago
- Process Hollowing for 32 bit and 64 bit☆79Updated 8 years ago
- Idapython script to carve binary for internal RPC structures☆239Updated last year
- View handles and object for each object type☆64Updated 6 years ago
- Inject unsigned DLL into Protected Process Light (PPL)☆30Updated 8 months ago
- Local privilege escalation PoC exploit for CVE-2019-16098☆199Updated 6 years ago
- Explore Job Objects on a Windows system☆82Updated 6 years ago
- codes for my blog post: https://secrary.com/Random/InstrumentationCallback/☆182Updated 8 years ago
- Helper idapython code for reversing kmdf drivers☆74Updated 3 years ago
- An command-line RPC method enumerator, born out of RPCView's awesomeness☆108Updated 6 years ago
- An example of a client and server using Windows' ALPC functions to send and receive data.☆115Updated 11 months ago
- 0CCh Windbg extension: include some useful commands☆113Updated 2 years ago
- awesome-windows-security-development☆176Updated 7 years ago
- Driver and WinDBG scripts to dump information about all resources and lookaside lists☆65Updated 5 years ago
- Library that allows you to run 64bit code on a Wow64 32bit process☆147Updated 8 years ago
- Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303☆111Updated 7 years ago
- A Windows kernel dump C++ parser library with Python 3 bindings.☆213Updated 3 months ago
- APC Internals Research Code☆168Updated 5 years ago
- ☆128Updated 5 years ago
- This program can retrieve signature information from PE files which signed by one or more certificates on Windows. Supporting multi-signe…☆103Updated 3 years ago