Abusing exceptions for code execution.
☆110Jan 30, 2023Updated 3 years ago
Alternatives and similar repositories for ExceptionOrientedProgramming
Users that are interested in ExceptionOrientedProgramming are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆91Jun 2, 2024Updated 2 years ago
- Finding Truth in the Shadows☆126Jan 26, 2023Updated 3 years ago
- White-box analytic framework based on LLVM☆38Jun 10, 2019Updated 7 years ago
- Dont Call Me Back - Dynamic kernel callback resolver. Scan kernel callbacks in your system in a matter of seconds!☆258Jul 9, 2024Updated 2 years ago
- WTSRM☆212Aug 7, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Using Microsoft Warbird to automatically unpack and execute encrypted shellcode in ClipSp.sys without triggering PatchGuard☆271Aug 31, 2022Updated 4 years ago
- miscellaneous scripts and programs☆292May 13, 2026Updated 5 months ago
- Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscal…☆322Aug 2, 2023Updated 3 years ago
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- ☆13Sep 25, 2023Updated 3 years ago
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 7 months ago
- LLVM Without The ROP Gadgets!☆24Jan 9, 2024Updated 2 years ago
- rp-bf: A library to bruteforce ROP gadgets by emulating a Windows user-mode crash-dump☆121May 1, 2024Updated 2 years ago
- HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate oper…☆388Jun 3, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The code is a pingback to the Dark Vortex blog:☆191Jan 26, 2023Updated 3 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆36Jul 27, 2021Updated 5 years ago
- Bootkit for Windows Sandbox to disable DSE/PatchGuard.☆350Oct 13, 2024Updated 2 years ago
- Infect Shared Files In Memory for Lateral Movement☆189Dec 14, 2022Updated 3 years ago
- Stripped-down release of Tiny CC for minimalist coding on 64-bit Windows.☆47Jan 31, 2026Updated 8 months ago
- ☆271Jan 14, 2023Updated 3 years ago
- Hook all callbacks which are registered with LdrRegisterDllNotification☆102Apr 3, 2025Updated last year
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆172Mar 15, 2023Updated 3 years ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆135Jan 2, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆60Jan 9, 2023Updated 3 years ago
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆86Dec 21, 2022Updated 3 years ago
- Miscellaneous Code and Docs☆87Sep 8, 2026Updated last month
- This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret …☆266Apr 29, 2023Updated 3 years ago
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated 11 months ago
- Replace the .txt section of the current loaded modules from \KnownDlls\☆308Sep 28, 2022Updated 4 years ago
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆676Dec 23, 2022Updated 3 years ago
- ☆165Sep 18, 2021Updated 5 years ago
- ☆14Mar 13, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆236Jul 25, 2023Updated 3 years ago
- ☆85Oct 15, 2022Updated 4 years ago
- A PoC implementation for dynamically masking call stacks with timers.☆316Feb 13, 2023Updated 3 years ago
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆329Jan 17, 2024Updated 2 years ago
- The code is a pingback to the Dark Vortex blog: https://0xdarkvortex.dev/hiding-memory-allocations-from-mdatp-etwti-stack-tracing/☆219Jan 29, 2023Updated 3 years ago
- A more stealthy variant of "DLL hollowing"☆369Mar 8, 2024Updated 2 years ago
- A WinDbg extension to trace COM interactions☆132Aug 14, 2025Updated last year