Windows AppLocker Driver (appid.sys) LPE
☆81Jul 29, 2024Updated 2 years ago
Alternatives and similar repositories for CVE-2024-21338
Users that are interested in CVE-2024-21338 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BYOVD Technique Example using viragt64 driver☆90Jul 25, 2024Updated 2 years ago
- CVE-2024-30090 - LPE PoC☆106Oct 17, 2024Updated last year
- ☆22Jan 15, 2025Updated last year
- A set of programs for analyzing common vulnerabilities in COM☆265Sep 8, 2024Updated 2 years ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆187May 17, 2023Updated 3 years ago
- CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious…☆15Jan 21, 2025Updated last year
- lsassdump via RtlCreateProcessReflection and NanoDump☆85Oct 18, 2024Updated last year
- C++ Staged Shellcode Loader with Evasion capabilities.☆95Oct 7, 2024Updated 2 years ago
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated 2 years ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆50Jul 29, 2024Updated 2 years ago
- Windows rootkit designed to work with BYOVD exploits☆225Jan 18, 2025Updated last year
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 6 months ago
- ☆110Aug 21, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Exploit targeting NT kernel in 24H2 Windows Insider Preview☆154Apr 26, 2024Updated 2 years ago
- NSecSoftBYOVD POC☆62Feb 12, 2026Updated 8 months ago
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- .NET tool used to enrich RPC telemetry☆102Jan 24, 2026Updated 8 months ago
- ☆125Sep 5, 2024Updated 2 years ago
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆165May 30, 2022Updated 4 years ago
- ☆146Mar 29, 2025Updated last year
- A Rust implementation of GodPotato — abusing SeImpersonate to gain SYSTEM privileges. Includes a TCP-based reverse shell and indirect NTA…☆370Mar 17, 2026Updated 6 months ago
- BYOVD hunter to help prioritize windows drivers worth manual analysis☆134Aug 19, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Proof-of-Concept for CVE-2024-21345☆77Apr 26, 2024Updated 2 years ago
- A simple Sleepmask BOF example☆179Nov 24, 2025Updated 10 months ago
- A BOF designed to inspect processes memory and addresses☆41Apr 19, 2026Updated 5 months ago
- Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability☆24Feb 5, 2025Updated last year
- Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods…☆208Apr 27, 2026Updated 5 months ago
- Process injection alternative☆403Sep 6, 2024Updated 2 years ago
- Analyse MSI files for vulnerabilities☆145Aug 30, 2024Updated 2 years ago
- Windows LPE☆145Jun 11, 2024Updated 2 years ago
- ☆40Jun 23, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.☆311May 23, 2026Updated 4 months ago
- Bypassing UAC with SSPI Datagram Contexts☆473Sep 24, 2023Updated 3 years ago
- ☆78Aug 5, 2024Updated 2 years ago
- Local SYSTEM auth trigger for relaying☆173Jul 22, 2025Updated last year
- Auto exploitation tool for CVE-2024-24401.☆35Sep 7, 2024Updated 2 years ago
- Proof of Concept CVE-2025-21420 (Windows Disk Cleanup Tool EoP)☆56Jun 12, 2025Updated last year
- a demo module for the kaine agent to execute and inject assembly modules☆41Aug 28, 2024Updated 2 years ago