cvlabsio Goto Github PK

windbgcookbook

This is a repo for small, useful scripts and extensions

windiff

Web-based tool that allows browsing and comparing symbol and type information of Microsoft Windows binaries across different versions of the OS.

windows-api-function-cheatsheets

A comprehensive reference of Windows system calls, including functions for file operations, process management, memory management, thread management, dynamic-link library (DLL) management, synchronization, interprocess communication, Unicode string manipulation, error handling, Winsock networking operations, and registry operations.

windows-api-fuzzer

Designed to learn OS specific anti-emulation patterns by fuzzing the Windows API.

windows-apt-warfare

著作《Windows APT Warfare：惡意程式前線戰術指南》各章節技術實作之原始碼內容

windows-apt-warfare-1

Windows APT Warfare, published by Packt

windows-coerced-authentication-methods

A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

windows-driver-privesc

Check windows drivers for weak permission which could lead to privilage escalation.

windows-event-forwarding

A repository for using windows event forwarding for incident detection and response

windows-exploitation

My notes while studying Windows exploitation

windows-internals

My notes while studying Windows internals

windows-internals-x

Important notes and topics on my journey towards mastering Windows Internals

windows-penetration-testing

Technical notes, AD pentest methodology, list of tools, scripts and Windows commands that I find useful during internal penetration tests

windows-research-kernel-wrk-

Windows Research Kernel Source Code

windows-rootkits

windows-signedbinary

windows-wec-server_auto-deploy

PowerShell scripts for fast Windows Event Collector configuration with Palantir toolset

windows10-customkernelsigners

Load self-signed drivers without TestSigning or disable DSE. Transferred from https://github.com/DoubleLabyrinth/Windows10-CustomKernelSigners

windows_event_logging

Windows Event Forwarding subscriptions, configuration files and scripts that assist with implementing ACSC's protect publication, Technical Guidance for Windows Event Logging.

windows_lpe_afd_cve-2023-21768

LPE exploit for CVE-2023-21768

windowsdllsexport

A list of all the DLLs export in C:\windows\system32\

windowsinternals

Windows Internals Book 7th edition Tools

windowsregistryrootkit

Kernel rootkit, that lives inside the Windows registry values data

winobjex64

Windows Object Explorer 64-bit

winpmem

The multi-platform memory acquisition tool.

winpwn

Automation for internal Windows Penetrationtest / AD-Security

winrepl

WinREPL is a "read-eval-print loop" shell on Windows that is useful for testing/learning x86 and x64 assembly.

winsock-pcap

C++ WinSock2 PCAP with RDI

wireguard-initramfs

Use dropbear over wireguard.

wkpe

Windows Kernel Programming Experiments