
wstrace
Standalone zero-driver Windows system and API monitor in Rust
binary-analysisdebuggersdefensive-tools+7

Standalone zero-driver Windows system and API monitor in Rust

Windows privilege escalation discovery tool that parses Process Monitor boot logs to identify DLL hijacking, weak ACLs, and other elevation paths,…

Runtime exploit monitor for Apple document/image pipelines (iOS/macOS) — EXPMON concept: Frida agent + behavioral rules. First target: the…

Proof-of-concept that exploits a Kaspersky driver vulnerability to leak kernel pointers and bypass KASLR on Windows, enabling kernel exploit chain…

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.