FuzzySecurity / BHUSA-2023Links
☆105Updated last year
Alternatives and similar repositories for BHUSA-2023
Users that are interested in BHUSA-2023 are comparing it to the libraries listed below
Sorting:
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆317Updated 2 years ago
- Local & remote Windows DLL Proxying☆165Updated last year
- Tools for analyzing EDR agents☆249Updated last year
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆291Updated 2 weeks ago
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆105Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆105Updated last year
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated last year
- ☆134Updated 2 years ago
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆114Updated last year
- ☆120Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆271Updated 11 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆47Updated last year
- ☆107Updated 2 years ago
- ☆137Updated 2 years ago
- Aplos an extremely simple fuzzer for Windows binaries.☆68Updated 6 months ago
- ☆147Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆192Updated 9 months ago
- BSides Prishtina 2024 Malware Development and Persistence workshop☆95Updated 3 months ago
- StoneKeeper C2, an experimental EDR evasion framework for research purposes☆207Updated 8 months ago
- Windows APT Warfare, published by Packt☆75Updated 2 years ago
- ☆192Updated last year
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆179Updated last year
- ☆64Updated last year
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆141Updated last month
- Find DLLs with RWX section☆81Updated 2 years ago
- ☆157Updated 9 months ago
- Slides & Code snippets for a workshop held @ x33fcon 2024☆268Updated last year
- Your syscall factory☆124Updated 2 months ago
- A Mythic Agent written in PIC C.☆199Updated 7 months ago
- Activation Context Hijack☆164Updated last month