0neb1n / CVE-2020-1349

Related projects ⓘ

Alternatives and complementary repositories for CVE-2020-1349

• Darkabode / amte
  Analysis and Modification Tool for Executables
  ☆16Updated 5 years ago
• DissectMalware / WinNativeIO
  Using Undocumented NTDLL Functions to Read/Write/Delete File
  ☆18Updated 3 years ago
• Darkabode / possessor
  User-mode part of Zerokit platform
  ☆20Updated 5 years ago
• d35ha / xKeLogger
  Kernel mode windows NT API logger
  ☆21Updated 5 years ago
• Darkabode / 0lib
  Zerokit shared code
  ☆16Updated 5 years ago
• sgabe / CVE-2019-1253
  AppXSvc Arbitrary File Security Descriptor Overwrite EoP
  ☆19Updated 5 years ago
• libyal / libfwevt
  Library for Windows XML Event Log (EVTX) data types
  ☆17Updated last month
• MortenSchenk / Privilege_Shellcode
  Kernel Shellcode to add all privileges in token
  ☆13Updated 7 years ago
• blaquee / APCHook
  hooking KiUserApcDispatcher
  ☆22Updated 7 years ago
• d35ha / ShellInjector
  Execute an arbitrary command within the context of another process
  ☆19Updated 5 years ago
• NtRaiseHardError / Windows-Binary-Exploitation
  Resources from my journey into Windows binary exploitation
  ☆22Updated 5 years ago
• IgorKorkin / AllMemProTestBed
  Legal access: The driver and console app to demonstrate the basic memory access in kernel mode
  ☆9Updated 6 years ago
• hailehong95 / practice-maldev
  Common Malware Techniques
  ☆13Updated last year
• smgorelik / CIGslip
  A new binary injection technique, can easily go through any #CIG protected process and slip through all possible defenses without any inj…
  ☆18Updated 6 years ago
• byck01 / KernelBugTest
  KernelBugTest
  ☆15Updated 6 years ago
• securesean / Shim-Process-Scanner
  Windows x64 Process Scanner to detect application compatability shims
  ☆36Updated 6 years ago
• aaaddress1 / APCInjector-BYPASS-AV
  ☆18Updated 9 years ago
• NtRaiseHardError / Providence
  Kernel-mode file scanner
  ☆17Updated 6 years ago
• hatRiot / DelayLoadInject
  Code injection via delay load libraries
  ☆34Updated 7 years ago
• MortenSchenk / tagWnd-Hardening-Bypass
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆26Updated 7 years ago
• BackTrackCRoot / Auto-Inject-Dll
  Auto Inject Dll , it have three method to inject your custom dll. help you to test inject.
  ☆9Updated 8 years ago
• mgeeky / prc_xchk
  User-mode process cross-checking utility intended to detect naive malware hiding itself by hooking IAT/EAT.
  ☆18Updated 8 years ago
• d35ha / RunPE
  An example of PE hollowing injection technique
  ☆22Updated 5 years ago
• n3k / misc_exploits_pocs
  Miscellaneous old Exploit code and PoCs
  ☆15Updated last month