reverseame/windows-memory-extractor

Stars
13
Rank 1,512,713 (Top 30 %)
Language
C++
License
GNU General Publi...
Created over 3 years ago
Updated over 1 year ago

reverseame/windows-memory-extractor

reverseame

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Tool to extract contents from the memory of Windows systems.

sigcheck

Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed

rop3

A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure

modex

Volatility 3 plugins to extract a module as complete as possible

pinVMShield

A pintool for protecting a sandbox application of common anti-virtualmachine and anti-sandbox detection techniques

winesap

Volatility plugin to search for all Autostart Extensibility Points (AESPs)

instant-messaging-artifact-finder

Tool to find memory artifacts present in instant messaging applications.

processfuzzyhash

Volatility plugin to calculate and compare Windows processes fuzzy hashes

winapi-categories

Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.

MOSTO-Modbus-simulator

MOSTO is a SCADA network device simulator based on ModbusTCP communications. Based on Python3

APOTHEOSIS

A specialized implementation of the Hierarchical Navigable Small World (HNSW) data structure adapted for efficient nearest neighbor lookup of approximate matching hashes

malscan

Volatility plugin to detect malicious code thanks to ClamAV

residentmem

Volatility plugin to obtain the number of the resident memory pages per module (exe or dll) and per driver from a Windows memory dump.

similarity-unrelocated-module

Volatility plugin to yield and compare similarity digest of modules on execution.

asistencia-aula-EINA-telegram-bot

Bot de Telegram para facilitar la entrada de datos de asistencia presencial en aulas de la EINA

Secure_Socket

C++ Sockets implementing hybrid encryption

dumd-mixer

Dump Module Mixer (dumd-mixer) is a Python script to generate a module from the same module extracted from a collection of memory dumps.

chiton

Chiton is a Python library to exfiltrate data encapsulating the data into IoT protocol’s packets