Alternatives and similar repositories for 38c3_com_talk

Users that are interested in 38c3_com_talk are comparing it to the libraries listed below

• tijme / relocatable
  Boilerplate to develop raw and truly Position Independent Code (PIC).
  ☆114Updated 11 months ago
• kr0tt / EarlyExceptionHandling
  Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH
  ☆133Updated 3 months ago
• Dor00tkit / CVE-2024-30090
  CVE-2024-30090 - LPE PoC
  ☆107Updated last year
• decoder-it / RelabelAbuse
  ☆63Updated last year
• Slowerzs / KeyJumper
  ☆52Updated 8 months ago
• passthehashbrowns / VectoredExceptionHandling
  ☆98Updated last year
• rbmm / SC
  shell code example
  ☆65Updated last week
• cbwang505 / FilesystemEoPDesktopSystemShell
  Folder Or File Delete to Get System Shell on Current Session Desktop
  ☆47Updated 11 months ago
• JanielDary / weetabix
  A C++ PoC implementation for enumerating Windows Fibers directly from memory
  ☆21Updated last year
• synacktiv / windows_kernel_shadow_stack
  Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.
  ☆53Updated 6 months ago
• SafeBreach-Labs / RPC-Racer
  Toolset to manipulate RPC clients by finding delayed services and masquerading as them
  ☆106Updated 4 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆166Updated last year
• p0dalirius / FindProcessesWithNamedPipes
  A simple C++ Windows tool to get information about processes exposing named pipes.
  ☆39Updated 9 months ago
• thiagopeixoto / winsos-poc
  A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.
  ☆111Updated last year
• Slowerzs / CryptDecryptMemory
  ☆31Updated last year
• MEhrn00 / boflink
  Linker for Beacon Object Files
  ☆134Updated 3 weeks ago
• tyranid / windows-memory-access-traps
  A few examples of how to trap virtual memory access on Windows.
  ☆38Updated last year
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆64Updated last year
• xaitax / ARM64-ReflectiveDLLInjection
  A Proof-of-Concept implementation of Reflective DLL Injection (RDI) specifically for Windows on ARM64. Demonstrates PEB access via the x1…
  ☆31Updated 6 months ago
• Wh04m1001 / GamingServiceEoP5
  ☆31Updated last year
• eversinc33 / PSXecute
  MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.
  ☆121Updated last year
• D4m0n / CVE-2025-50168-pwn2own-berlin-2025
  CVE-2025-50168 Exploit PoC — Pwn2Own Berlin 2025 - LPE(Windows 11) winning bug.
  ☆130Updated last month
• susMdT / ForsHops
  ForsHops
  ☆59Updated 8 months ago
• Crowdfense / CVE-2024-21338
  Windows AppLocker Driver (appid.sys) LPE
  ☆69Updated last year
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆73Updated 8 months ago
• outflanknl / seccomp-notify-injection
  Linux Process Injection via Seccomp Notifier
  ☆71Updated last week
• silentwarble / PIC-Library
  A collection of position independent coding resources
  ☆101Updated last month
• klezVirus / koppeling-p
  Adaptive DLL hijacking / dynamic export forwarding - EAT preserve
  ☆78Updated last year
• c2pain / RustBird
  Early Bird APC Injection in Rust
  ☆63Updated last year
• maliciousgroup / RDI-SRDI
  This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".
  ☆88Updated 2 years ago