Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats
Busbar
Busbar
Bifrost
Bifrost

nmht3t/RawHive

Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file data straight from disk.

Visit GitHub
C
110
10
1 contributors
MIT License
AchievementsView all →
FeaturedAdvertise to 180K+ monthly visitors
Busbar

Control what AI can do before it acts

Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

Momentum

How fast nmht3t/RawHive is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Sep 9 – Oct 21, 2026

Stars +18 in 43 days

0510
9

Forks +2 in 43 days

01
1

Merged PRs 1 in 43 days

01
1

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Sep 9Sep 15Sep 21Sep 27Oct 3Oct 9Oct 15Oct 21
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Wed, Sep 9, 2026+1+00
Thu, Sep 10, 2026+0+00
Fri, Sep 11, 2026+0+00
Sat, Sep 12, 2026+0+00
Sun, Sep 13, 2026+0+00
Mon, Sep 14, 2026+1+00
Tue, Sep 15, 2026+0+00
Wed, Sep 16, 2026+0+00
Thu, Sep 17, 2026+0+00
Fri, Sep 18, 2026+0+00
Sat, Sep 19, 2026+0+00
Sun, Sep 20, 2026+0+00
Mon, Sep 21, 2026+1+00
Tue, Sep 22, 2026+1+00
Wed, Sep 23, 2026+0+00
Thu, Sep 24, 2026+0+00
Fri, Sep 25, 2026+0+00
Sat, Sep 26, 2026+0+00
Sun, Sep 27, 2026+0+00
Mon, Sep 28, 2026+0+00
Tue, Sep 29, 2026+0+00
Wed, Sep 30, 2026+0+00
Thu, Oct 1, 2026+0+00
Fri, Oct 2, 2026+0+00
Sat, Oct 3, 2026+0+00
Sun, Oct 4, 2026+0+00
Mon, Oct 5, 2026+0+00
Tue, Oct 6, 2026+0+00
Wed, Oct 7, 2026+0+00
Thu, Oct 8, 2026+0+00
Fri, Oct 9, 2026+0+00
Sat, Oct 10, 2026+1+00
Sun, Oct 11, 2026+1+01
Mon, Oct 12, 2026+0+00
Tue, Oct 13, 2026+9+10
Wed, Oct 14, 2026+0+00
Thu, Oct 15, 2026+0+00
Fri, Oct 16, 2026+2+10
Sat, Oct 17, 2026+0+00
Sun, Oct 18, 2026+0+00
Mon, Oct 19, 2026+1+00
Tue, Oct 20, 2026+0+00
Wed, Oct 21, 2026+0+00
Total+18+21
  • 1#1 on the list
  • 7Rank that day
  • Not trending

Mentions and achievements

Where people are talking about nmht3t/RawHive, and every badge it has earned
  1. Jun 201 post

    • RawHive: Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file data straight from disk.

      Read full on Reddit

      r/blueteamsec

  2. Jun 172 posts

    • RawHive - Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file data straight from disk

      Read full on X, posted by @ipurple

      @ipurple · x.com

    • Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file data straight from disk.

      Read full on Reddit

      r/purpleteamsec

You might also like

Repositories close to nmht3t/RawHive
FeaturedAdvertise to 180K+ monthly visitors
Busbar

Control what AI can do before it acts

Bifrost

Enterprise AI Gateway Built For Scale: Route, Govern, and Secure All Your AI Traffic

libguestfs/hivex

C

windows registry hive extraction library. PLEASE DO NOT USE GITHUB FOR ISSUES OR PULL REQUESTS. See the website for how to file a bug or contact us. http://libguestfs.org

15637

ricardojoserf/SAMDump

C#

Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. In C#, C++, Crystal, Python, Rust, Golang, Nim and Deno (Javascript)

38652

EricZimmerman/RECmd

Rebol

Command line access to the Registry

18443

jfjallid/go-secdump

Go

Tool to remotely dump secrets from the Windows registry

53555

Xre0uS/MultiDump

C

MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.

54367

EricZimmerman/Registry

C#

Full featured, offline Registry parser in C#

26060

REDMED-X/OperatorsKit

C

Collection of Beacon Object Files (BOF) for Cobalt Strike

71499

chryzsh/redteam-bofs

C

Repository for various Beacon Object Files (BOFs)

12410

mkorman90/regipy

Python

Regipy is an os independent python library for parsing offline registry hives

27761