93 matches found
Noriben
Noriben Malware Analysis Sandbox root@kitploit: Contact Information: @bbaskin on Twitter brian at thebaskins dot com Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell, ...
whids
IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...
ProcDump-for-Linux
ProcDump ProcDump は、Windows 用の Sysinternals ツールスイートに含まれるクラシックな ProcDump ツールを Linux および Mac 向けに再構築したものです。ProcDump は、パフォーマンストリガーに基づいてアプリケーションのコアダンプを作成する便利な方法を Linux および Mac の開発者に提供します。Linux および Mac 向けの ProcDump は Sysinternals の一部です。 インストールと使い方 要件 最小 Linux OS: Red Hat Enterprise Linux / CentOS 7...
Find-VulnerableElectronVersion
Find-VulnerableElectronVersion 実行可能ファイルをスキャンし、Sysinternals ツール Strings を使用して、Chromium の脆弱性 CVE-2023-4863 / CVE-2023-5129 に対して脆弱な Electron バージョンでラップされているかどうかを判定します。Windows デバイスでのみサポートされています。 Sysinternals のインストールが必要です: https://learn.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite 構文例:...
EUVD-2007-4206
Malware in sbrugna...
EUVD-2004-2720
Malware in sbrugna...
EUVD-2021-7197
Malicious code in bioql PyPI...
EUVD-2023-32926
Malicious code in bioql PyPI...
Exploit for Use After Free in Microsoft
CVE Analysis & Detection — PoCs, Snort Detection, and Mitigati...
CVE-2005-2679
Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...
How to Capture a Memory Dump from a Provisioned Target in a Hyper-V Environment
This article describes how to generate a memory dump file from a provisioned target in a Hyper-V environment.This process requires no modification to the virtual machine. Requirements Download and install the Debugging Tools for Windows package from Microsoft's web site: Debugging Tools for Windo...
VulnCheck KEV: CVE-2021-1733
Sysinternals PsExec Elevation of Privilege Vulnerability...
The vulnerability in the set of Sysinternals system utilities for Windows operating systems allows a hacker to trigger a service failure.
The vulnerability in the Sysinternals system utilities for Windows operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2023-29353
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
CVE-2023-29353
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
CVE-2023-29353
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
Denial of service
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
CVE-2023-29353
CVE-2023-29353 affects Sysinternals Process Monitor for Windows. The connected sources describe a Denial-of-Service vulnerability likely stemming from incorrect resource handling in Sysinternals/Process Monitor, with the impact explicitly stated as DoS and the CVSS indicating local access with us...
