JanielDary / weetabixLinks
A C++ PoC implementation for enumerating Windows Fibers directly from memory
☆21Updated last year
Alternatives and similar repositories for weetabix
Users that are interested in weetabix are comparing it to the libraries listed below
Sorting:
- Exploiting the KsecDD Windows driver through Server Silos☆74Updated last year
- Reimplementation of the KExecDD DSE bypass technique.☆57Updated last year
- Your NTDLL vaccine from modern direct syscall methods.☆36Updated 3 years ago
- ☆100Updated last year
- List the ETW provider(s) in the registration table of a process.☆80Updated 2 years ago
- ☆89Updated last year
- ☆42Updated 11 months ago
- shell code example☆67Updated last month
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆136Updated 3 years ago
- A few examples of how to trap virtual memory access on Windows.☆39Updated last year
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆113Updated 3 years ago
- ☆64Updated last year
- ☆60Updated 3 months ago
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Updated last year
- Enabled / Disable LSA Protection via BYOVD☆81Updated 4 years ago
- API Hammering with C++20☆49Updated 3 years ago
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆65Updated 2 years ago
- ☆31Updated last year
- ☆35Updated 2 years ago
- ☆100Updated 2 years ago
- This repo contains PoCs for vulnerable Windows drivers.☆118Updated last month
- In-memory hiding technique☆63Updated last year
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆136Updated 5 months ago
- ☆120Updated 3 years ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆27Updated 2 years ago
- Folder Or File Delete to Get System Shell on Current Session Desktop☆47Updated last year
- ☆57Updated 6 months ago
- A more reliable way of resolving syscall numbers in Windows☆54Updated last year
- Small tool to play with IOCs caused by Imageload events☆44Updated 2 years ago
- From C, Rust or Zig to binary shellcode compiler based on Mingw gcc. It allows using Win32 APIs and standard libraries without any change…☆53Updated 4 months ago