Three Tiny Examples of Directly Using Vista's NtCreateUserProcess
☆90Nov 9, 2015Updated 10 years ago
Alternatives and similar repositories for createuserprocess
Users that are interested in createuserprocess are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Jan 21, 2019Updated 7 years ago
- HTTP/HTTPS/DNS inspector (windows driver)☆25Feb 20, 2019Updated 7 years ago
- The project is a demo solution for one of the anti-rootkit techniques aimed on overcoming splicers☆34Mar 13, 2017Updated 9 years ago
- Process Doppelgänging☆163Dec 19, 2017Updated 8 years ago
- Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html☆143May 10, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆25Mar 3, 2019Updated 7 years ago
- Windows 10 UAC bypass PoC using LaunchInfSection☆36Aug 3, 2018Updated 8 years ago
- AllMemPro☆46Jan 15, 2018Updated 8 years ago
- ☆25Jul 24, 2020Updated 6 years ago
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- X86 version of syswhispers2 / x86 direct system call☆331Jan 28, 2021Updated 5 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆154Feb 23, 2019Updated 7 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- ☆13Oct 31, 2016Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆14Apr 7, 2018Updated 8 years ago
- ☆108Sep 24, 2018Updated 8 years ago
- Debugger extension for the Debugging Tools for Windows (WinDbg, KD, CDB, NTSD).☆69Nov 14, 2016Updated 9 years ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- AppXSvc Arbitrary File Security Descriptor Overwrite EoP☆19Sep 15, 2019Updated 7 years ago
- This is a simple driver with x64 inline assembly☆55Jun 26, 2020Updated 6 years ago
- An open source library for operating the Windows Overlay Filter driver.☆22Jan 16, 2019Updated 7 years ago
- ☆31Aug 23, 2020Updated 6 years ago
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A Windows native DLL injection library written in C# that supports several methods of injection.☆11Dec 17, 2018Updated 7 years ago
- a sandbox project by sudami☆17Jul 31, 2018Updated 8 years ago
- ☆50Jun 30, 2020Updated 6 years ago
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- POC for a race condition exploit using directory junctions in Windows☆17Apr 26, 2020Updated 6 years ago
- A working version of this tutorial: https://docs.microsoft.com/en-us/windows/desktop/rpc/tutorial☆15Jun 22, 2019Updated 7 years ago
- HAXM hypervisor client☆18Nov 30, 2018Updated 7 years ago
- A future hobby OS kernel☆11Nov 8, 2020Updated 5 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆57Feb 2, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- User-mode part of Zerokit platform☆23Mar 30, 2019Updated 7 years ago
- A ready-made template for a project based on libpeconv.☆54Apr 18, 2026Updated 6 months ago
- PoC of BOOST-ed _EPROCESS.VadRoot iterating☆27May 21, 2014Updated 12 years ago
- Detect strange memory regions and DLLs☆190Jan 20, 2022Updated 4 years ago
- My implementation of enSilo's Process Doppelganging (PE injection technique)☆647Aug 30, 2022Updated 4 years ago
- A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.☆58Jun 11, 2019Updated 7 years ago
- Stealthy Injector that leverages a vulnerable driver and other exploits to remain undetected☆38Dec 10, 2018Updated 7 years ago