KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#typescript #ai-agents #developer-tools #cli #codex #claude-code #dsh-plugin #mcp #react #agent #dsh #deepseek-harness

SharpCrashEventLog

★ 46 Open GitHub ↗

C# port of LogServiceCrash

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# SharpCrashEventLog

![SharpCrashEventLog](https://raw.githubusercontent.com/slyd0g/SharpCrashEventLog/main/example.png)

## Description
A port of [limbenjamin's](https://github.com/limbenjamin) [LogServiceCrash](https://github.com/limbenjamin/LogServiceCrash) project to C#.

Crashes the Windows eventlog service locally or remotely using ```OpenEventLogA```/```ElfClearEventLogFileW```.

- Added the ability to specify a remote server from the cmdline

From limbenjamin's [blogpost](https://limbenjamin.com/articles/crash-windows-event-logging-service.html):

>Windows Event Logging service will crash with an Access Violation when advapi32.dll!ElfClearEventLogFileW is called with a handle obtained from advapi32.dll!OpenEventLogA. By default, The service is restarted after the first and second failure only. Hence an adversary can crash the service 3 times after which he is able to execute further malicious commands without being logged. The fail count will be reset after 1 day by default.

## Usage
- Crash the local computer's event log service
    - ```.\SharpCrashEventLog \\localhost```
- Crash a remote computer's event log service
    - ```.\SharpCrashEventLog \\targetcomputer```

SharpCrashEventLog

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README