BreakingMalwareResearch / eleven
Elevation by environment variable expansion
☆65Updated 8 years ago
Alternatives and similar repositories for eleven:
Users that are interested in eleven are comparing it to the libraries listed below
- A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext☆50Updated 6 years ago
- public bugs/proof of concepts☆48Updated 3 years ago
- ☆51Updated 8 years ago
- kernel exploitation helper class☆76Updated 8 years ago
- ☆33Updated 7 years ago
- Exploit Win10Pcap Driver to enable some Privilege in our process token ( local Privilege escalation )☆60Updated 9 years ago
- Bypassing User Account Control (UAC) using TpmInit.exe☆127Updated 8 years ago
- Simple tool to automate adding shellcode to PE files☆49Updated 6 years ago
- Some source code snippets In my development.☆27Updated 2 years ago
- UAC 0Day all day!☆58Updated 7 years ago
- Some sample code from my Zero Nights 2017 presentation.☆62Updated 7 years ago
- Reflective Polymorphism☆104Updated 6 years ago
- zer0m0n driver for cuckoo sandbox☆87Updated 8 years ago
- Supporting Files on my analysis of the malware designated hdroot.☆59Updated 7 years ago
- Bypassing User Account Control (UAC) using TpmInit.exe☆42Updated 8 years ago
- A repository of some of my Windows 10 Device Guard Bypasses☆134Updated 7 years ago
- Usefull snippets / Computer-security oriented☆21Updated 7 years ago
- NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements☆96Updated 7 years ago
- HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass☆61Updated 7 years ago
- s(4)u for Windows☆48Updated 4 years ago
- PoC dlls for Task Scheduler COM Hijacking☆91Updated 8 years ago
- Sentinel is a command line tool able to protect Windows 32 bit programs against exploits targeted by attackers or viruses. It can protect…☆71Updated 10 years ago
- A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as th…☆98Updated 5 years ago
- An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit☆81Updated 7 years ago
- Resolves DLL API entrypoints for a process w/ remote query capabilities.☆54Updated 7 years ago
- ☆51Updated 7 years ago
- MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe☆59Updated 7 years ago
- Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.☆131Updated 11 years ago
- POC for IAT Parsing Payloads☆47Updated 8 years ago
- ☆74Updated 2 years ago