FuzzySecurity / BHUSA-2023Links
☆105Updated last year
Alternatives and similar repositories for BHUSA-2023
Users that are interested in BHUSA-2023 are comparing it to the libraries listed below
Sorting:
- A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.☆314Updated last year
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆103Updated last year
- ☆119Updated last year
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆113Updated 10 months ago
- Local & remote Windows DLL Proxying☆165Updated last year
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated last year
- ☆64Updated last year
- Windows APT Warfare, published by Packt☆70Updated 2 years ago
- ☆107Updated 2 years ago
- ☆140Updated last month
- Tools for analyzing EDR agents☆232Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆100Updated last year
- ☆136Updated 2 years ago
- Activation Context Hijack☆155Updated 7 months ago
- ☆131Updated last year
- ☆188Updated last year
- Detect EDR's exceptions by inspecting processes' loaded modules☆130Updated last year
- ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Sysc…☆127Updated last week
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆265Updated 9 months ago
- Aplos an extremely simple fuzzer for Windows binaries.☆69Updated 4 months ago
- ☆113Updated 3 years ago
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆120Updated last year
- A bunch of scripts and code i wrote.☆141Updated 8 months ago
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆115Updated 7 months ago
- BSides Prishtina 2024 Malware Development and Persistence workshop☆85Updated last month
- Windows rootkit designed to work with BYOVD exploits☆200Updated 5 months ago
- ☆155Updated 7 months ago
- Payload encoding utility to effectively lower payload entropy.☆118Updated 3 months ago
- Find DLLs with RWX section☆81Updated 2 years ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆103Updated 3 months ago