Kudaes / Elevator
UAC bypass by abusing RPC and debug objects.
☆613Updated last year
Alternatives and similar repositories for Elevator:
Users that are interested in Elevator are comparing it to the libraries listed below
- DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.☆491Updated 2 years ago
- PoCs and tools for investigation of Windows process execution techniques☆915Updated last month
- A Highly capable Pe Packer☆699Updated 2 years ago
- PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.☆583Updated last year
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆635Updated 2 years ago
- Lifetime AMSI bypass☆625Updated last year
- Various ways to execute shellcode☆490Updated last year
- Cobalt Strike UDRL for memory scanner evasion.☆933Updated 11 months ago
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆668Updated last year
- A Payload Loader Designed With Advanced Evasion Features☆512Updated 2 years ago
- Spartacus DLL/COM Hijacking Toolkit☆1,037Updated last year
- Tools and PoCs for Windows syscall investigation.☆360Updated 4 months ago
- Performing Indirect Clean Syscalls☆541Updated 2 years ago
- This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp…☆417Updated last year
- LPE exploit for CVE-2023-21768☆487Updated last year
- LPE exploit for CVE-2023-21768☆419Updated 2 years ago
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆1,313Updated last year
- Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls☆368Updated 7 months ago
- Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes☆967Updated last year
- ☆525Updated last year
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆510Updated 2 years ago
- Kernel mode WinDbg extension and PoCs for token privilege investigation.☆861Updated 3 months ago
- .NET/PowerShell/VBA Offensive Security Obfuscator☆495Updated last year
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆535Updated this week
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆473Updated last year
- A BOF that runs unmanaged PEs inline☆596Updated 6 months ago
- kill anti-malware protected processes ( BYOVD) ( Microsoft Won)☆938Updated last year
- Sleep Obfuscation☆749Updated last year
- Threadless Process Injection through entry point hijacking☆344Updated 7 months ago
- UAC bypass for x64 Windows 7 - 11☆802Updated 2 years ago