TheWover/ModuleMonitor TheWover/ModuleMonitor

  • Stars
    star
    39
  • Rank 693,563 (Top 14 %)
  • Language
    C#
  • License
    BSD 3-Clause "New...
  • Created over 5 years ago
  • Updated over 5 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
TheWover/ModuleMonitor
github

TheWover

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Injection attacks.

More Repositories

1

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
C
3,012
star
2

DInvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.
C#
666
star
3

CertStealer

A .NET tool for exporting and importing certificates without touching disk.
C#
422
star
4

GhostLoader

GhostLoader - AppDomainManager - Injection - ζ”»ε£³ζœΊεŠ¨ι˜Ÿ
C#
119
star
5

EasyNet

Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library. Algorithm: Data <-> GZip <-> AES-256 <-> Base64.
C#
89
star
6

Manager

Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NET
C++
62
star
7

ProcessManager

ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.
C#
12
star
8

AsyncRAT-VB.NET

Remote Administration Tool For Windows VB.NET
Visual Basic
8
star
9

beercode

Free beerware-quality code in exchange for beer money (if you are so inclined). ;-)
C#
4
star
10

HVNC

HVNC for C# (from TinyNuke)
C#
1
star