Exploitable drivers, you know what I mean
☆153Nov 16, 2025Updated 6 months ago
Alternatives and similar repositories for drivers-binaries
Users that are interested in drivers-binaries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆61Aug 21, 2023Updated 2 years ago
- ☆202Jul 29, 2024Updated last year
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆203Jun 6, 2024Updated last year
- ☆26Dec 29, 2021Updated 4 years ago
- Lenovo Diagnostics Driver EoP - Arbitrary R/W☆175Dec 5, 2022Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- PoC Implementation of a fully dynamic call stack spoofer☆958Jul 20, 2024Updated last year
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆318Aug 31, 2023Updated 2 years ago
- A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…☆469Aug 23, 2023Updated 2 years ago
- ☆133Sep 24, 2023Updated 2 years ago
- Some usefull info when reverse engineering Kernel Mode Anti-Cheat☆79Feb 20, 2023Updated 3 years ago
- PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.☆625Sep 26, 2023Updated 2 years ago
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆381Jun 3, 2023Updated 2 years ago
- Load your driver like win32k.sys☆256Aug 20, 2022Updated 3 years ago
- DoppelGate relies on reading ntdll on disk to grab syscall stubs, and patches these syscall stubs into desired functions to bypass Userla…☆125Mar 25, 2022Updated 4 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆593Jan 24, 2023Updated 3 years ago
- LPE exploit for CVE-2023-36802☆166Oct 10, 2023Updated 2 years ago
- Living Off The Land Drivers☆1,637May 20, 2026Updated last week
- PoC memory injection detection agent based on ETW, for offensive and defensive research purposes☆298Apr 10, 2021Updated 5 years ago
- ☆23May 8, 2023Updated 3 years ago
- Dump the memory of any PPL with a Userland exploit chain☆354Mar 17, 2023Updated 3 years ago
- Abusing nvidia driver (nvoclock.sys) for physical/virtual memory and control register manipulation.☆288Mar 16, 2026Updated 2 months ago
- ☆143Dec 10, 2022Updated 3 years ago
- What makes it page☆17Aug 24, 2022Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A PoC implementation for spoofing arbitrary call stacks when making sys calls (e.g. grabbing a handle via NtOpenProcess)☆573Apr 8, 2025Updated last year
- Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver☆153Oct 12, 2023Updated 2 years ago
- ☆210Mar 22, 2021Updated 5 years ago
- Windows LPE exploit for CVE-2022-37969☆135Jul 11, 2023Updated 2 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Admin to Kernel code execution using the KSecDD driver☆269Apr 19, 2024Updated 2 years ago
- A modern 32/64-bit position independent implant template☆1,336Mar 21, 2025Updated last year
- UAC bypass by abusing RPC and debug objects.☆630Oct 19, 2023Updated 2 years ago
- A small PoC that creates processes in Windows☆187Jun 6, 2024Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Replace the .txt section of the current loaded modules from \KnownDlls\☆306Sep 28, 2022Updated 3 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- ☆16Apr 21, 2023Updated 3 years ago
- Virtual and physical memory hacking library using gigabyte vulnerable driver☆70Mar 16, 2026Updated 2 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,016Jun 4, 2024Updated last year
- The Definitive Guide To Process Cloning on Windows☆550Jan 3, 2024Updated 2 years ago
- Signtool for expired certificates☆517Jun 10, 2023Updated 2 years ago