explife0011 Goto Github PK

privilege_escalation

Post Exploitation examples - metasploitable (netlink) and windows (bypassuac) local privilege escalation

prngs

Fast Pseudo-Random Number Generators

procdump-for-linux

A Linux version of the ProcDump Sysinternals tool

process-dump

Windows tool for dumping malware PE files from memory back to disk for analysis.

process-magics

This is a collection of interesting codes about Windows Process creation.

process-monitor

API that allows to monitor processes in Windows

process-proxifier

Using FiddlerCore to add proxy settings to the Windows applications

process_chameleon

A process overwriting its own PEB to make an illusion that it has been loaded from a different path.

process_doppelganging

My implementation of enSilo's Process Doppelganging (PE injection technique)

processhacker

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware.

processhandlerdriver

Kernel mode driver to handle CreateProcess event and client for it.

processhider

Post-exploitation tool for hiding processes from monitoring applications

processhider-1

processinjection

Some ways to inject a DLL into a alive process

processisolator

processmanager

processmanager_ring0

基于驱动的进程管理器，目前仅开发了进程枚举功能

processmonitoranalyzemalware

Script to parse Process Monitor XML log file, and give you a summary report.

processrefund

新的注入方式

processspawncontrol

Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.

processstalker

procexp

Process explorer for linux

procexp_reverseengineer

A command-line version Process Explorer clone.

procfilter

A YARA-integrated process denial framework for Windows

proclogger

Windows Simple Process Logger implemented as driver

procmon-filters

SysInternals' Process Monitor filters repository - collected from various places and made up by myself. To be used for quick Behavioral analysis of testing specimens. Inspired and based on Lenny Zeltser's collection.

procmon-for-linux

Procmon is a Linux reimagining of the classic Procmon tool from the Sysinternals suite of tools for Windows. Procmon provides a convenient and efficient way for Linux developers to trace the syscall activity on the system.

procmonxv2

Process Monitor X v2

procsentinel

driver for win to verify the address space of a process

programmer-job-blacklist

:see_no_evil:程序员找工作黑名单，换工作和当技术合伙人需谨慎啊