nmht3t/RawHive

Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file data straight from disk.

语言：C · GitHub 星标：112 · Fork：10

在 GitHub 上查看原仓库