Windows Security

WMI MonitorPowerShell

A PowerShell script that monitors and logs newly created WMI consumers and processes to the Windows Application event log.

WELAPowerShell

A PowerShell tool for auditing and configuring Windows event log settings to improve security visibility and detection capabilities.

Ghost-usbC

A honeypot that emulates USB storage devices to detect and capture malware that spreads via USB propagation.

WINHELLO2hashcatPython

Extracts Windows Hello PIN hashes for offline cracking with Hashcat.

pe-signRust

A cross-platform Rust library and CLI tool for parsing, verifying, and extracting digital signatures from PE files.

PowerSponsePowerShell

A PowerShell module for targeted containment and remediation during incident response, enabling remote cleanup of malware artifacts.

gosddlGo

A Go library and tool to convert Windows SDDL security descriptors into user-friendly JSON format.

CVE-2024-20674Python

Exploit for Windows Kerberos mutual authentication bypass vulnerability (CVE-2024-20674) leading to remote code execution.