Alternatives and similar repositories for WindowsKernelExploits

Users that are interested in WindowsKernelExploits are comparing it to the libraries listed below

• tomcarver16 / SimpleInjector
  A simple injector that uses LoadLibraryA
  ☆17Updated 4 years ago
• sevagas / weaponize_process_injection_windows_SIGSEGv2_2019
  Files related to my presentation at SigSegV2 conference in 2019. You can find related papers on my blog
  ☆13Updated 5 years ago
• sailay1996 / FileWrite2system
  File Write Weapon for Privilege Escalation To get SYSTEM
  ☆18Updated 4 years ago
• trustedsec / inProc_Evade_Get-InjectedThread
  PoC code from blog
  ☆16Updated 5 years ago
• connormcgarr / Kernel-Escalation-of-Privileges-Payloads
  NT AUTHORITY\SYSTEM
  ☆39Updated 4 years ago
• vineetgaurav / WIN_JELLY
  Windows GPU rootkit PoC by Team Jellyfish
  ☆35Updated 10 years ago
• karol-gruszczyk / win-rootkit
  ☆24Updated 9 years ago
• Apr4h / GetInjectedThreads
  C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
  ☆53Updated 3 years ago
• boku7 / x64win-AddRdpAdminShellcode
  64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"
  ☆40Updated 4 years ago
• slyd0g / SK8PARK
  Python 3 server used to control SK8RAT implant
  ☆36Updated 4 years ago
• keyboardcrunch / sentinelone_usbscan
  A custom SentinelOne USB scanner.
  ☆18Updated 3 years ago
• 0xC0D1F1ED / cpp_vs_payload_template
  Visual Studio (C++) Solution Template for Payloads
  ☆18Updated 5 years ago
• mgeeky / PEInfo
  Another Portable Executable files analysing stuff
  ☆21Updated 13 years ago
• byt3bl33d3r / herpaderping
  Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…
  ☆19Updated 4 years ago
• archival-0x / menagerie
  Cross-platform malware development library for anti-analysis techniques
  ☆24Updated 3 years ago
• dsnezhkov / exclave
  ☆16Updated 4 years ago
• vletoux / OxidBindings
  Extract all IP of a computer using DCOM without authentication (aka detect network used for administration)
  ☆26Updated 5 years ago
• 1d8 / tempinject
  ☆20Updated 4 years ago
• decoder-it / diaghub_exploit
  Simplified version of Forshaw's Diaghub Collector Exploit
  ☆31Updated 6 years ago
• jthuraisamy / av-fingerprints
  Antivirus Emulator Fingerprints
  ☆29Updated 6 years ago
• jaamaal / Embed
  Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…
  ☆22Updated 4 years ago
• DimopoulosElias / Primitives
  ☆31Updated 4 years ago
• shantanu561993 / heroku-reverse-proxy
  Spin up a reverse proxy quickly on Heroku
  ☆14Updated 4 years ago
• ethereal-vx / Persistence
  Recreating and reviewing the Windows persistence methods
  ☆38Updated 3 years ago
• a1ext / Windows-Exploit-Suggester
  This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on th…
  ☆15Updated 3 years ago
• Exploit-install / DKMC
  DKMC - Dont kill my cat - Malicious payload evasion tool
  ☆21Updated 7 years ago
• carlospolop / MalwarePoC
  Windows Malware Probe of Concept
  ☆21Updated 2 years ago
• fox-it / signed-phishing-email
  ☆11Updated 6 years ago
• singe / wpa3_brute
  Simple mods to wpa_supplicant to allow more efficient online bruting
  ☆18Updated 5 years ago
• FuzzySecurity / Presentations
  A collection of my presentation materials.
  ☆17Updated last year