Tools
PrivFu
daem0nc0re/PrivFu
A kernel-mode WinDbg extension and proof-of-concept collection for investigating Windows token privileges and privilege-escalation techniques.
Topics
Related projects
fibratus2.6kFibratus is a Windows security sensor for real-time threat detection and response. It monitors system events, applies behavioral rules and YARA memory scanning, and exports telemetry for forensic analysis.
TangledWinExec960A collection of PoCs and diagnostic tools for researching Windows process execution and injection techniques like hollowing and PPID spoofing.
winfsp9kA Windows file-system development framework that provides a kernel driver and user-mode APIs, enabling developers to build custom file systems similar to FUSE.
Microsoft-Activation-Scripts198.3kOpen-source activation scripts for Windows and Office offering HWID, Ohook, TSforge, and online KMS methods plus troubleshooting guidance.
clash-verge-rev157.4kA Tauri-based Clash Meta GUI client with the mihomo core, subscription management, TUN mode, and visual proxy and rule editing.
PowerToys140.6kMicrosoft's collection of Windows productivity utilities, including FancyZones, PowerRename, Command Palette, Color Picker, and more than 30 tools.