A fully compatible replacement of Windows NT NtCreateLowBoxToken syscall - precisely restored from reverse engineering
☆46Jun 10, 2025Updated last year
Alternatives and similar repositories for NtCreateLowBoxToken
Users that are interested in NtCreateLowBoxToken are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …☆335Mar 6, 2025Updated last year
- ☆13Mar 28, 2022Updated 4 years ago
- WinAPI Hook to allow WinUI 3 running in UWP environment☆23Nov 7, 2023Updated 2 years ago
- Folder Or File Delete to Get System Shell on Current Session Desktop☆47Jan 14, 2025Updated last year
- ACL Viewer for Windows☆133May 4, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Remove WPP calls from hexrays decompiled code☆60Jan 31, 2026Updated 6 months ago
- eject_idb is a last ditch effort to flush and save your IDB when IDA hangs or a plugin causes an exception, etc.☆42Aug 18, 2026Updated last week
- Emulate Drivers in RING3 with self context mapping or unicorn☆21Jan 1, 2025Updated last year
- Windows Mobile Emulator source code that MS released. Modified to work with VS2022.☆16Mar 11, 2023Updated 3 years ago
- ☆31Oct 13, 2020Updated 5 years ago
- ☆23Jan 15, 2025Updated last year
- POC for CVE-2023-29360☆11Aug 31, 2024Updated last year
- UWP Storage layer that help to deal with storage by string path just like Win32 methods☆12May 16, 2025Updated last year
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆14Feb 4, 2023Updated 3 years ago
- 对Windbg以Exdi模式下调试windows做一些修复☆21Aug 25, 2023Updated 3 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆36Nov 12, 2021Updated 4 years ago
- Generate a PDB file given the old PDB file and an address mapping☆55Aug 3, 2025Updated last year
- A simple rpc2socks alternative in pure Go.☆32Jul 8, 2024Updated 2 years ago
- Panda - is a set of utilities used to research how PsExec encrypts its traffic.☆13Apr 20, 2021Updated 5 years ago
- AppX RPC Local Privilege Escalation - Windows 10/11☆94May 21, 2026Updated 3 months ago
- (No longer maintained) An in-development Virtual Machine client for UWP☆16Jan 29, 2024Updated 2 years ago
- 一款基于James Forshaw的.NET Remoting反序列化工具升级版在TypeFilterLevel.Low模式无文件payload任意代码执行poc的开发心得☆48Jan 23, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Escape macOS Sandbox using sharedfilelistd exploit☆65Jun 28, 2025Updated last year
- Flow Frame is a new and improved Frame control. This builds upon the default frame control by providing high-performance page transition …☆16Jan 5, 2024Updated 2 years ago
- ☆27Dec 29, 2021Updated 4 years ago
- .NET Native but with CoreRT's ILCompiler☆28Feb 29, 2024Updated 2 years ago
- UWP app with MinGW-w64☆17Feb 11, 2025Updated last year
- A Proof-of-Concept implementation of Reflective DLL Injection (RDI) specifically for Windows on ARM64. Demonstrates PEB access via the x1…☆38May 30, 2025Updated last year
- anti-ransomware file-system filter☆71Sep 3, 2024Updated last year
- Microsoft Store products API wrapper.☆18Jun 21, 2025Updated last year
- A POC for Windows Extension Host hooking☆24Jul 13, 2019Updated 7 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- XPN's RpcEnum but based on IDA instead of Ghidra☆21Aug 17, 2019Updated 7 years ago
- Create a performant WinUI application with Uwp and CoreWindow and run as full-trust win32☆20Mar 21, 2025Updated last year
- A in-the-wild V8 type confusion bug.☆31Aug 8, 2025Updated last year
- Various techniques used to bypass SMEP in the Windows Kernel.☆19Apr 20, 2025Updated last year
- Tool for viewing and editing PRI files☆26Aug 14, 2026Updated 2 weeks ago
- Procmonel is Procmon like monitoring system implemented using Microsoft WDK☆13Dec 25, 2019Updated 6 years ago
- Slides for COM Hijacking AV/EDR Talk on 38c3☆75Jan 3, 2025Updated last year