whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

ProcDump-for-Linux

ProcDump ProcDump es una reinvención de la clásica herramienta ProcDump del conjunto Sysinternals para Windows, adaptada para Linux y Mac. ProcDump proporciona una manera conveniente para que los desarrolladores de Linux y Mac creen volcados de núcleo de sus aplicaciones basados en disparadores d...

Noriben

Noriben 恶意软件分析沙盒 root@kitploit: 联系方式： @bbaskin 在 Twitter 上 brian at thebaskins dot com Noriben 是一个基于 Python 的脚本，与 Sysinternals Procmon 协同工作，能够自动收集、分析并报告恶意软件的运行时指标。简而言之，它允许你运行一个应用程序，按下按键，即可获得该样本活动的简明文本报告。 Noriben...

Find-VulnerableElectronVersion

Find-VulnerableElectronVersion Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129 using the Sysinternals tool Strings. Only supported on Windows devices. Requires Sysinternals to be installed:...

EUVD-2004-2720

Malware in sbrugna...

EUVD-2007-4206

Malware in sbrugna...

EUVD-2021-7197

Malicious code in bioql PyPI...

EUVD-2023-32926

Malicious code in bioql PyPI...

Exploit for Use After Free in Microsoft

CVE Analysis & Detection — PoCs, Snort Detection, and Mitigati...

CVE-2005-2679

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...

How to Capture a Memory Dump from a Provisioned Target in a Hyper-V Environment

This article describes how to generate a memory dump file from a provisioned target in a Hyper-V environment.This process requires no modification to the virtual machine. Requirements Download and install the Debugging Tools for Windows package from Microsoft's web site: Debugging Tools for Windo...

VulnCheck KEV: CVE-2021-1733

Sysinternals PsExec Elevation of Privilege Vulnerability...

The vulnerability in the set of Sysinternals system utilities for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability in the Sysinternals system utilities for Windows operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2023-29353

Sysinternals Process Monitor for Windows Denial of Service Vulnerability...

CVE-2023-29353

Sysinternals Process Monitor for Windows Denial of Service Vulnerability...

CVE-2023-29353

Sysinternals Process Monitor for Windows Denial of Service Vulnerability...

Denial of service

Sysinternals Process Monitor for Windows Denial of Service Vulnerability...

CVE-2023-29353 Sysinternals Process Monitor for Windows Denial of Service Vulnerability

...

CVE-2023-29353

CVE-2023-29353 affects Sysinternals Process Monitor for Windows. The connected sources describe a Denial-of-Service vulnerability likely stemming from incorrect resource handling in Sysinternals/Process Monitor, with the impact explicitly stated as DoS and the CVSS indicating local access with us...

Sysinternals Process Monitor for Windows Denial of Service Vulnerability

...