LordNoteworthy / windows-exploitation

Related projects: ⓘ

• NullArray / WinKernel-Resources
  A list of excellent resources for anyone to deepen their understanding with regards to Windows Kernel Exploitation and general low level …
  ☆116Updated last year
• therealdreg / masm32-kernel-programming
  masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)
  ☆114Updated last year
• am0nsec / vx
  Virus Exchange (VX) - Collection of malware or assembly code used for "offensive" purposed.
  ☆176Updated 2 years ago
• Faran-17 / Windows-Internals
  Important notes and topics on my journey towards mastering Windows Internals
  ☆330Updated 4 months ago
• VoidSec / Exploit-Development
  Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)
  ☆213Updated last year
• Unprotect-Project / Unprotect_Submission
  Repository to publish your evasion techniques and contribute to the project
  ☆128Updated 2 weeks ago
• am0nsec / wspe
  Windows System Programming Experiments
  ☆214Updated 2 years ago
• zodiacon / Recon2023
  Recon 2023 slides and code
  ☆77Updated last year
• connormcgarr / Kernel-Exploits
  Kernel Exploits
  ☆240Updated 3 years ago
• hasherezade / masm_shc
  A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.
  ☆157Updated 2 months ago
• hasherezade / mal_unpack_drv
  MalUnpack companion driver
  ☆92Updated 3 months ago
• Bw3ll / sharem
  SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…
  ☆334Updated this week
• dalvarezperez / CreateFile_based_rootkit
  ☆131Updated last year
• ByteHackr / WindowsExploitation
  A curated list of awesome Windows Exploitation resources, and shiny things.
  ☆68Updated 7 years ago
• floesen / KExecDD
  Admin to Kernel code execution using the KSecDD driver
  ☆232Updated 5 months ago
• hasherezade / process_overwriting
  Yet another variant of Process Hollowing
  ☆349Updated 6 months ago
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆221Updated 2 years ago
• KDSS-Research / MalwareDB
  ☆92Updated this week
• frank2 / packer-tutorial
  A tutorial on how to write a packer for Windows!
  ☆240Updated 9 months ago
• daem0nc0re / VectorKernel
  PoCs for Kernelmode rootkit techniques research.
  ☆333Updated 2 weeks ago
• ElliotKillick / windows-vs-linux-loader-architecture
  Side-by-side comparison of the Windows and Linux (GNU) Loaders
  ☆269Updated 2 weeks ago
• tbhaxor / WinAPI-RedBlue
  Source code of exploiting windows API for red teaming series
  ☆146Updated last year
• hasherezade / antianalysis_demos
  Set of antianalysis techniques found in malware
  ☆124Updated last year
• hfiref0x / WDExtract
  Extract Windows Defender database from vdm files and unpack it
  ☆419Updated 4 years ago
• janoglezcampos / llvm-yx-callobfuscator
  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.
  ☆247Updated 8 months ago
• Fyyre / DrvMon
  Advanced driver monitoring utility.
  ☆194Updated 2 years ago
• Cracked5pider / LdrLibraryEx
  A small x64 library to load dll's into memory.
  ☆422Updated 10 months ago
• therealdreg / x64dbg-exploiting
  Do you want to use x64dbg instead of immunity debugger? oscp eCPPTv2 buffer overflow exploits pocs
  ☆76Updated 8 months ago
• daem0nc0re / AtomicSyscall
  Tools and PoCs for Windows syscall investigation.
  ☆349Updated 4 months ago
• Idov31 / Jormungandr
  Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.
  ☆219Updated 11 months ago