MaherAzzouzi / VMExploitation

Related projects: ⓘ

• bharadwajyas / ppdump-public
  Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…
  ☆23Updated 4 years ago
• aaaddress1 / knownDlls_Poison
  ☆26Updated 2 years ago
• klinix5 / vmware-authd-EoP
  ☆37Updated this week
• decoder-it / bluehatil22
  Slides from out talk at BH IL 2022
  ☆26Updated 2 years ago
• Lagal1990 / CVE-2020-1020-Exploit
  ☆15Updated this week
• klinix5 / GoogleUpdateSvcLPE
  ☆22Updated this week
• a7t0fwa7 / windows-ps-callbacks-experiments
  Files for http://deniable.org/windows/windows-callbacks
  ☆24Updated 4 years ago
• Kudaes / Scripts
  Repository for dirty scripts and PoCs
  ☆16Updated last year
• thefLink / Memfiddler
  Executes shellcode from a remote server and aims to evade in-memory scanners
  ☆29Updated 4 years ago
• jas502n / DriveLife-PsTrojan
  TrojanDropper/PS.Maloader.d
  ☆12Updated 2 years ago
• 0x3rhy / GetClipboard
  Cobalt Strike Get clipboard plugin
  ☆12Updated last year
• jonas-koeritz / amsi
  Golang wrapper for the Microsoft Antimalware Scan Interface (AMSI)
  ☆11Updated 2 years ago
• corelight / cve-2022-26809
  Detects attempts and successful exploitation of CVE-2022-26809
  ☆31Updated this week
• sergey-cheperis / mimikatz-staticlib
  Mimikatz built as a static library.
  ☆11Updated 2 years ago
• quiggleypuff / EvilProfiler
  Simple .NET profiler shellcode loader
  ☆10Updated 2 years ago
• Lagal1990 / SMBGhost-Full-RCE
  ☆15Updated this week
• smokeme / ProxyNotShell
  ☆18Updated last year
• wafinfo / SyscallLoader
  SyscallLoader
  ☆9Updated 3 years ago
• joshfinley / CVE-2020-11492
  ☆13Updated this week
• timwhitez / Freeze-Common
  Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
  ☆14Updated last year
• aazhuliang / CVE-2021-31956-EXP
  ☆39Updated 2 years ago
• huykingsofm / Packed-Infected-PE
  A tool is used to infected a shellcode to PE file, the shellcode is packed at compile time and unpacked at runtime
  ☆13Updated 4 years ago
• aaaddress1 / masqueradeCmdline
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆38Updated 3 years ago
• timwhitez / JmpUnhook
  Ntdll Unhooking POC
  ☆19Updated 2 years ago
• klezVirus / DCKFinder
  Dangling COM Keys Finder
  ☆14Updated 2 years ago
• neofito / CVE-2020-1337
  CVE-2020-1048 bypass: binary planting PoC
  ☆32Updated 4 years ago
• Mr-Un1k0d3r / RedTeamFSharp
  ☆25Updated this week
• S4R1N / TotallyNotAStager
  ☆15Updated this week
• timwhitez / Doge-Persist
  Windows Persistence Collection
  ☆12Updated 3 years ago
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆47Updated 3 years ago