Process_Protection_Level_BOF

Process protection checker

A tool that helps operators determine the protection level of a process before attempting to access its memory

GitHub

51 stars
4 watching
8 forks
Language: C
last commit: about 5 years ago

Related projects:

RepositoryDescriptionStars
rasta-mouse/ppenumA tool to determine the protection level of a process using a simple Binary Object Formatter (BOF) approach.111
espressocake/defender_exclusions-bofTools to determine Windows Defender exclusions241
espressocake/ppldump_bofA tool for dumping the memory contents of a protected process on Windows136
espressocake/self_deletion_bofBOF implementation of a research concept allowing for controlled deletion of processes171
espressocake/toggle_token_privileges_bofA tool to add or remove specific privilege rights from the token of the current process52
espressocake/dll_imports_bofAn enumeration tool to inspect PE files and extract information about loaded DLLs and their imported functions83
espressocake/firewall_walker_bofAn exploit technique allowing interaction with Windows software firewall via COM interfaces.100
espressocake/dll-hijack-search-order-bofA tool to enumerate the search order of DLL resolution and potentially gain information about a file's mutability.141
espressocake/needle_sift_bofA tool for searching for specific strings within files using a needle-sift algorithm30
benjefferies/branch-protection-botA tool to temporarily disable branch protection to allow administrator pushes72
octoberfest7/killdefender_bofA tool that allows an attacker to elevate privileges and gain control over the Windows Defender service62
outflanknl/findobjects-bofAn exploit tool that uses direct system calls to enumerate processes based on specific loaded modules or process handles266
like0x/adddefenderexclusions-bofA tool to add exclusions to a security system's defender to prevent false positives or unwanted alerts32
otterhacker/coffloaderAn implementation of in-house CoffLoader supporting CobaltStrike standard BOF and BSS initialized variables.48
uniba-dsg/bppDetects portability issues in BPEL code to ensure compatibility across different engines and environments.4