Crowdfense / CVE-2024-21338Links
Windows AppLocker Driver (appid.sys) LPE
☆67Updated last year
Alternatives and similar repositories for CVE-2024-21338
Users that are interested in CVE-2024-21338 are comparing it to the libraries listed below
Sorting:
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆131Updated 3 months ago
- Template-based generation of shellcode loaders☆79Updated last year
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆45Updated last year
- A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.☆111Updated last year
- Plantronics Desktop Hub LPE☆37Updated last year
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆65Updated 2 years ago
- Section-based payload obfuscation technique for x64☆64Updated last year
- Reimplementation of the KExecDD DSE bypass technique.☆55Updated last year
- CVE-2024-30090 - LPE PoC☆108Updated last year
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆78Updated last year
- KVC enables unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulatio…☆125Updated this week
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆50Updated 10 months ago
- BYOVD Technique Example using viragt64 driver☆63Updated last year
- Your NTDLL vaccine from modern direct syscall methods.☆36Updated 3 years ago
- Linux Sleep Obfuscation☆105Updated last year
- Splitting and executing shellcode across multiple pages☆103Updated 2 years ago
- Select any exported function in a dll as the new dll's entry point.☆81Updated last year
- Exploiting the KsecDD Windows driver through Server Silos☆75Updated last year
- ☆74Updated 4 months ago
- e(X)tensiable (Rust) Malware Toolkit: (Soon!) Full Featured Rust C2 Framework with Awesome Features!☆27Updated last year
- ☆100Updated 2 years ago
- A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user☆41Updated last year
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆88Updated 2 years ago
- Windows LPE Nday☆32Updated last year
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆62Updated last year
- Win32 keylogger that supports all (non-ime using) languages correctly☆53Updated last year
- Folder Or File Delete to Get System Shell on Current Session Desktop☆47Updated 10 months ago
- ☆97Updated last year
- lsassdump via RtlCreateProcessReflection and NanoDump☆83Updated last year