CVE-2018-6066 using VBA
☆64Oct 24, 2022Updated 4 years ago
Alternatives and similar repositories for Ring0VBA
Users that are interested in Ring0VBA are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆115Oct 10, 2022Updated 4 years ago
- XDNR is a X0R Cryptor along with DEC/N0T/R0R encoder plus random byte insertion encoder, that generates null free encrypted and encoded s…☆16Jul 12, 2022Updated 4 years ago
- ☆17Jan 14, 2026Updated 9 months ago
- I have documented all of the AMSI patches that I learned till now☆72Nov 4, 2025Updated last year
- It's pointy and it hurts!☆127Oct 18, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆389Jul 30, 2024Updated 2 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆57Feb 2, 2026Updated 9 months ago
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- ☆47Jun 21, 2023Updated 3 years ago
- A PoC executing shellcode in Dart☆15Jun 28, 2022Updated 4 years ago
- DLL sideloading/proxying with Nim!☆174Dec 4, 2022Updated 3 years ago
- Exploitation of process killer drivers☆206Oct 17, 2023Updated 3 years ago
- A C# Tool to find left over pentest data for use in your pentest or redteam op. Blue could maybe use to find files to cleanup☆35Sep 14, 2023Updated 3 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆172Mar 15, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A Sigma based detection pipeline☆12Dec 15, 2023Updated 2 years ago
- ☆15Feb 9, 2022Updated 4 years ago
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆66Feb 11, 2024Updated 2 years ago
- A persistant Windows Service Proof of Concept, where the Service will run after Restart or Shutdown, and invoke a given software executab…☆36Sep 17, 2026Updated last month
- A shellcode function to encrypt a running process image when sleeping.☆336Sep 11, 2021Updated 5 years ago
- ☆105May 15, 2023Updated 3 years ago
- Tool for efficient directory enumeration☆64Jan 27, 2026Updated 9 months ago
- ☆207Feb 24, 2022Updated 4 years ago
- ☆16Jul 30, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ETW based POC to identify direct and indirect syscalls☆197Apr 19, 2023Updated 3 years ago
- A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading☆85Nov 21, 2022Updated 3 years ago
- (PoC) Tiny Excel BIFF8 Generator, to Embedded 4.0 Macros in xls files without Excel.☆43Aug 1, 2021Updated 5 years ago
- A bunch of scripts and code i wrote.☆155Nov 7, 2024Updated last year
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- Remote code execution in Power Platform connectors via JSON deserialization☆23Mar 30, 2023Updated 3 years ago
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- ☆123Dec 23, 2022Updated 3 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆298Jul 15, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆20Jul 9, 2022Updated 4 years ago
- A small toolkit for generating ClickOnce payloads with AppDomainManager Injection.☆18Nov 5, 2025Updated last year
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆178Feb 10, 2023Updated 3 years ago
- Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL (as in RecycledGate).☆186Feb 12, 2023Updated 3 years ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆142Sep 12, 2022Updated 4 years ago
- ErebusGate for Nim Bypass AV/EDR☆159Nov 7, 2022Updated 3 years ago
- Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.☆242Sep 26, 2023Updated 3 years ago