FuzzySecurity / BHUSA-2023Links
☆105Updated last year
Alternatives and similar repositories for BHUSA-2023
Users that are interested in BHUSA-2023 are comparing it to the libraries listed below
Sorting:
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆104Updated last year
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆318Updated 2 years ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated 2 years ago
- Local & remote Windows DLL Proxying☆168Updated last year
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆117Updated last year
- Tools for analyzing EDR agents☆268Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆105Updated last year
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆312Updated 3 weeks ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆273Updated last year
- Find DLLs with RWX section☆80Updated 2 years ago
- A bunch of scripts and code i wrote.☆144Updated last year
- Aplos an extremely simple fuzzer for Windows binaries.☆68Updated 8 months ago
- ☆119Updated last year
- ☆107Updated 2 years ago
- ☆64Updated last year
- BSides Prishtina 2024 Malware Development and Persistence workshop☆111Updated 5 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆50Updated last year
- Exploitation of process killer drivers☆200Updated 2 years ago
- ☆159Updated 11 months ago
- Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak☆207Updated 2 years ago
- ☆148Updated last year
- ShellWasp is a tool to help build shellcode that utilizes Windows syscalls, while overcoming the portability problem associated with Wind…☆170Updated 2 years ago
- Slides & Code snippets for a workshop held @ x33fcon 2024☆272Updated last year
- Payload encoding utility to effectively lower payload entropy.☆120Updated 7 months ago
- A set of programs for analyzing common vulnerabilities in COM☆236Updated last year
- Your syscall factory☆126Updated last month
- Windows APT Warfare, published by Packt☆76Updated 2 years ago
- ☆113Updated 3 years ago
- Detect EDR's exceptions by inspecting processes' loaded modules☆130Updated last year
- ☆157Updated 5 months ago