PyStat

PyStat - Advanced Netstat For Windows Compatible with Python Version 2.7 Features Know remote address of process Know remote ports of process Know which user using process along with title & PID Changelogs: Auto Install python modules support added in install.py Installation Guide: Download the...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: root@kitploit: ▶ cat urls.txt https://example.com/path?one=1&two=2...

tetragon

Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...

tarian

Tarian We want to maintain this as open-source to fight against the attacks on our favorite Kubernetes ecosystem. We can fight threats together as a community, by continuous contribution. Protect your Applications running on Kubernetes from malicious attacks by pre-registering your source code...

WhacAMole

WhacAMole WhacAMole is a program that analyzes processes in memory in an integral way, detecting and alerting of anomalies related to malware and presenting and saving in files all the relevant information for verification, correlation or analysis, as well as dumping memory regions, processes and...

iMonitor

中文 Introduction iMonitor Endpoint Behavior Analysis System is a endpoint behavior monitoring and analysis software based on iMonitorSDK. Provides monitoring of system behaviors such as processes, files, registry, and networks. Support extensions and scripts, you can easily customize and add more...

apiscope

ApiScope ApiScope — это исследовательский инструмент для Windows x64, предназначенный для трассировки избранных API-вызовов в новом или уже запущенном процессе. Он отслеживает события загрузки DLL через отладчик Windows и устанавливает перехватчики до того, как отлаживаемая программа продолжит...

Ps-Tools

Ps-Tools, an advanced process monitoring toolkit for offensive operations. Having a good technical understanding of the systems we land on during an engagement is a key condition for deciding what is going to be the next step within an operation. Collecting and analysing data of running processes...

thematrix

TheMatrix This project was created to ease the malware analysis process. The goal is to create an activator binary whose purpose is to load a user defined binary and monitor the execution by using Win32 API hooks. Relevant data is then saved to disk. The code supports both x86 and x64 binaries. D...

bandwhich

bandwhich Это CLI-утилита для отображения текущего использования сети по процессам, соединениям и удалённым IP/именам хостов. Содержание bandwhich Содержание Статус проекта Как это работает? Установка Статус пакетов в репозиториях Загрузить готовый бинарник Сборка из исходников Кросс-компиляция...

rustnet

RustNet 터미널용 프로세스별 네트워크 모니터링: 딥 패킷 검사가 포함된 실시간 TCP, UDP, QUIC 연결, 기본적으로 샌드박싱됨 English | 简体中文 |...

linux-smart-enumeration

Во-первых, пара полезных однострочников ; root@kitploit: wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh root@kitploit: curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo...

strace

strace — трассировщик системных вызовов Linux Это strace — диагностическая, отладочная и обучающая утилита пространства пользователя с традиционным интерфейсом командной строки для Linux. Она используется для мониторинга и вмешательства во взаимодействия между процессами и ядром Linux, включая...

process-enumeration-stealth

🚴 process-enumeration-stealth 이게 뭔가요? 이것은 \ntfs\ 기본 디바이스Windows 파일 시스템 기본 개체를 쿼리하여 현재 NTFS를 사용 중인 PID 목록을 반환할 수 있게 해주는 간단한 PoC입니다. 이 방법을 사용하면 NtQuerySystemInformation이나 상위 수준의 EnumProcesses와 같은 일반적인 API를 사용할 필요가 없습니다. 이 특이한 정찰 방법을 사용하면 운영자가 엔드포인트에서 일반적인 모니터링을 회피할 수 있습니다 🎉. 이 트릭을 원래 발견해 주신 Jonas L...

KilledProcessCanary

Windows Killed Process Canary 자신이 종료되었는지 감지하고, 여러 인스턴스가 종료되었을 경우 최대 절전 모드로 전환하는 Windows 서비스입니다. NCC Group Plc가 오픈 소스로 공개했습니다 - http://www.nccgroup.com/ Ollie Whitehouse 개발, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/KilledProcessCanary AGPL 라이선스로 배포됩니다. 자세한 내용은 LICENSE를...

Securing the Sandbox: A Rootless Containerized Framework for Process-Oriented Monitoring in Computer Graphics Education

Computer Science education fundamentally depends on intensive laboratory hours to foster true programming mastery and logical reasoning. However, the widespread adoption of Generative Artificial Intelligence AI has made it virtually impossible to distinguish authentic student effort from instant ...

Linux Kernel FD-Race Monitoring

This C program is a defensive process-monitoring utility, not a privilege-escalation exploit. It continuously inspects /proc/pid/fd to detect suspicious activity related to excessive file descriptor usage, activity from sensitive SUID binaries, and potential file descriptor leakage or theft...

PT-2026-40970

Name of the Vulnerable Software and Affected Versions Fleet versions prior to 4.81.0 Description A denial-of-service DoS issue exists in the gRPC Launcher "PublishLogs" endpoint. Certain unexpected input values are not handled gracefully, which can cause the server process to terminate while...

Codra Panorama Suite 安全漏洞

Codra Panorama Suite is an industrial process monitoring software platform developed by the French company Codra. There is a security vulnerability in Codra Panorama Suite, which allows attackers to potentially read files on the Web HMI server...