├── Hunting_For_Windows_Features_And_How_To_Use_Them_WWHF_2022.pdf ├── README.md ├── examples └── WFH_Dridex_System32_08172022.csv ├── loadlibrary.js ├── registry.js ├── requirements.txt ├── wfh.py └── wfh_dridex.py /Hunting_For_Windows_Features_And_How_To_Use_Them_WWHF_2022.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ConsciousHacker/WFH/HEAD/Hunting_For_Windows_Features_And_How_To_Use_Them_WWHF_2022.pdf -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ConsciousHacker/WFH/HEAD/README.md -------------------------------------------------------------------------------- /examples/WFH_Dridex_System32_08172022.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ConsciousHacker/WFH/HEAD/examples/WFH_Dridex_System32_08172022.csv -------------------------------------------------------------------------------- /loadlibrary.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ConsciousHacker/WFH/HEAD/loadlibrary.js -------------------------------------------------------------------------------- /registry.js: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ConsciousHacker/WFH/HEAD/registry.js -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | frida-tools 2 | pefile==2021.5.24 3 | psutil==5.8.0 4 | pydemangler==0.1 -------------------------------------------------------------------------------- /wfh.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ConsciousHacker/WFH/HEAD/wfh.py -------------------------------------------------------------------------------- /wfh_dridex.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/ConsciousHacker/WFH/HEAD/wfh_dridex.py --------------------------------------------------------------------------------