93 matches found
Noriben
Noriben Malware Analysis Sandbox root@kitploit: Contact Information: @bbaskin on Twitter brian at thebaskins dot com Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell, ...
whids
IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...
ProcDump-for-Linux
ProcDump ProcDump 是经典 ProcDump 工具（来自 Windows 的 Sysinternals 套件）在 Linux 和 Mac 上的重新实现。ProcDump 为 Linux 和 Mac 开发者提供了一种便捷的方式，基于性能触发器为应用程序创建核心转储（core dump）。ProcDump for Linux and Mac 是 Sysinternals 的一部分。 安装与使用 系统要求 最低 Linux 操作系统版本： Red Hat Enterprise Linux / CentOS 7 Fedora 29 Ubuntu 16.04 LTS gdb =...
Find-VulnerableElectronVersion
Find-VulnerableElectronVersion Scans an executable and determines if it was wrapped in an Electron version vulnerable to the Chromium vulnerability CVE-2023-4863/ CVE-2023-5129 using the Sysinternals tool Strings. Only supported on Windows devices. Requires Sysinternals to be installed:...
EUVD-2007-4206
Malware in sbrugna...
EUVD-2004-2720
Malware in sbrugna...
EUVD-2021-7197
Malicious code in bioql PyPI...
EUVD-2023-32926
Malicious code in bioql PyPI...
Exploit for Use After Free in Microsoft
CVE Analysis & Detection — PoCs, Snort Detection, and Mitigati...
CVE-2005-2679
Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...
How to Capture a Memory Dump from a Provisioned Target in a Hyper-V Environment
This article describes how to generate a memory dump file from a provisioned target in a Hyper-V environment.This process requires no modification to the virtual machine. Requirements Download and install the Debugging Tools for Windows package from Microsoft's web site: Debugging Tools for Windo...
VulnCheck KEV: CVE-2021-1733
Sysinternals PsExec Elevation of Privilege Vulnerability...
The vulnerability in the set of Sysinternals system utilities for Windows operating systems allows a hacker to trigger a service failure.
The vulnerability in the Sysinternals system utilities for Windows operating systems is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2023-29353
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
CVE-2023-29353
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
CVE-2023-29353
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
Denial of service
Sysinternals Process Monitor for Windows Denial of Service Vulnerability...
CVE-2023-29353
CVE-2023-29353 affects Sysinternals Process Monitor for Windows. The connected sources describe a Denial-of-Service vulnerability likely stemming from incorrect resource handling in Sysinternals/Process Monitor, with the impact explicitly stated as DoS and the CVSS indicating local access with us...
