zha0 Goto Github PK

windows_exporter

Prometheus exporter for Windows machines

windows_hack_teach

windows 黑客技术编程技术详解配套的代码资源

windows_hardening

Windows Hardening settings and configurations

windows_hunt

Analyze Windows Systems for common and unique vulnerabilities

windows_kernel_resources

Windows Kernel Resources.

windows_lpe_pocs

windows_pentest_tools

My pentest tools used two years ago.

winhackingbin

Collection of Windows Hacking Binaries

winhex_templates

X-Ways Forensic/ WinHex templates

winipt

The Windows Library for Intel Process Trace (WinIPT) is a project that leverages the new Intel Processor Trace functionality exposed by Windows 10 Redstone 5 (1809), through a set of libraries and a command-line tool.

winkernel-rs

Utility functions for building Windows kernel drivers in Rust

winlogszero2hero

This is a repository from Adam Swan and I's presentation on Windows Logs Zero 2 Hero.

winnie

Winnie is an end-to-end system that makes fuzzing Windows applications easy

winpe

Windows privilege escalation with cmd

winpmem

The multi-platform memory acquisition tool.

winpriv

WinPriv is a utility that can enable privileges and virtually alter registry settings within a target process, amongst other things.

winpwn

Automation for internal Windows Penetrationtest / AD-Security

winregfs

Windows Registry FUSE filesystem

winremoteenum

WinRemoteEnum is a module-based collection of operations achievable by a low-privileged domain user.

winring0

WinRing0 is a hardware access library for Windows.

winring0-poc

Proof-of-concept exploit for WinRing0.

winrpcfunctions

winsearchappcache

Windows Search App Cache parsing

winsmsd

Windows (ShadowMove) Socket Duplication

winx64-injectallprocessesmeterpreter-shellcode

64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.

wireguard-manager

✔️ wireguard-manager enables you to build your own vpn under a minute.

wiresharkkerberospkidissector

Wireshark Kerberos PKI Dissector

wmeye

WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement

wmi_forensics

wmireg

PoC to interact with local/remote registry hives through WMI