Alternatives and similar repositories for QuickAssist_UAC_Bypass

Users that are interested in QuickAssist_UAC_Bypass are comparing it to the libraries listed below

• Hagrid29 / BYOVDKit
  bring your own vulnerable driver
  ☆98Updated 2 years ago
• Teach2Breach / moonwalk
  find dll base addresses without PEB WALK
  ☆91Updated last month
• dlima04 / thread-pool-injection
  PoC for thread pool based process injection in Windows.
  ☆116Updated 2 months ago
• NetSPI / BOF-PE
  An example reference design for a proposed BOF PE
  ☆168Updated last month
• Friends-Security / RedirectThread
  Playing around with Thread Context Hijacking. Building more evasive primitives to use as alternative for existing process injection techn…
  ☆159Updated 3 weeks ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆115Updated 7 months ago
• WKL-Sec / LayeredSyscall
  Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …
  ☆257Updated 10 months ago
• fern89 / C2
  A basic C2 framework written in C
  ☆60Updated 11 months ago
• RedTeamOperations / VEH-PoC
  ☆115Updated 2 years ago
• YOLOP0wn / EchoDrv
  Exploitation of echo_driver.sys
  ☆170Updated last year
• klezVirus / RpcProxyInvoke
  Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar
  ☆130Updated 9 months ago
• aplyc1a / PEMemoryLoader
  Load static-compiled PE from remote server.
  ☆62Updated 3 years ago
• ASkyeye / FilelessRemotePE
  Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique
  ☆63Updated 2 years ago
• NtDallas / OdinLdr
  Cobaltstrike Reflective Loader with Synthetic Stackframe
  ☆123Updated 4 months ago
• itm4n / PPLrevenant
  Bypass LSA protection using the BYODLL technique
  ☆161Updated 8 months ago
• iilegacyyii / DataInject-BOF
  Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll
  ☆120Updated last month
• AzAgarampur / byeintegrity9-uac
  ☆36Updated 2 years ago
• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆110Updated 10 months ago
• oldboy21 / SyscallMeMaybe
  Implementation of Indirect Syscall technique to pop a calc.exe
  ☆102Updated last year
• naksyn / DojoLoader
  Generic PE loader for fast prototyping evasion techniques
  ☆231Updated 11 months ago
• ProcessusT / Venoma
  Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution
  ☆180Updated last week
• passthehashbrowns / BOFMask
  ☆122Updated last year
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆161Updated last year
• Octoberfest7 / enumhandles_BOF
  ☆125Updated 9 months ago
• jdu2600 / EtwTi-FluctuationMonitor
  Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections
  ☆134Updated 2 years ago
• NtDallas / Draugr
  BOF with Synthetic Stackframe
  ☆147Updated 3 months ago
• 0xTriboulet / rdll-rs
  A reflective DLL development template for the Rust programming language
  ☆87Updated 2 weeks ago
• jseclab / obj2shellcode
  shellcode生成框架
  ☆86Updated 10 months ago
• evilashz / PigSyscall
  An implementation of an indirect system call
  ☆127Updated last year
• fortra / CVE-2024-6769
  Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)
  ☆71Updated 8 months ago