DLL_Imports_BOF
by EspressoCake
A BOF to parse the imports of a provided PE-file, optionally extracting symbols on a per-dll basis.
AI summary
PE DLL inspector
An enumeration tool to inspect PE files and extract information about loaded DLLs and their imported functions
- stars
- 83
- forks
- 10
- watching
- 3
Similar projects
Found by comparing what the projects do, not just their names.
DLL Search Enumerator
A tool to enumerate the search order of DLL resolution and potentially gain information about a file's mutability.
Process protection checker
A tool that helps operators determine the protection level of a process before attempting to access its memory
Exclusion tool
Tools to determine Windows Defender exclusions
Process dumper
A tool for dumping the memory contents of a protected process on Windows
String finder
A tool for searching for specific strings within files using a needle-sift algorithm
Firewall Exploit
An exploit technique allowing interaction with Windows software firewall via COM interfaces.
Pipe information viewer
This tool lists active Windows pipes and returns their owners and DACL permissions
PE file analyzer
Analyzes PE files by combining data from various tools to generate a centralized report.
Process killer
BOF implementation of a research concept allowing for controlled deletion of processes
Privilege toggler
A tool to add or remove specific privilege rights from the token of the current process
PE scanner
An executable file analyzer tool that detects security, configuration, optimization, system, and format issues in Windows executables
DLL Hijacker
A tool that exploits a Windows vulnerability to execute arbitrary code on remote systems using a technique called DLL hijacking.
petoolse/petools1.1K
PE file analyzer
A toolkit for analyzing and manipulating Portable Executable (PE) files used in Windows applications.
MPLS filter demo
Demonstrates packet encapsulation and decapsulation with MPLS labels using eBPF
med0x2e/sigflip1.1K
PE file modifier
A tool for modifying signed executable files without invalidating the signature or integrity checks.
