RobinFassinaMoschiniForks / TransitionalPeriod
Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits
☆28Updated 2 years ago
Alternatives and similar repositories for TransitionalPeriod:
Users that are interested in TransitionalPeriod are comparing it to the libraries listed below
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆54Updated 2 years ago
- A work in progress BOF/COFF loader in Rust☆47Updated 2 years ago
- Get your data from the resource section manually, with no need for windows apis☆59Updated 5 months ago
- An example of COM hijacking using a proxy DLL.☆28Updated 3 years ago
- ☆60Updated 3 years ago
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules☆41Updated last year
- ForsHops☆22Updated this week
- yet another sleep encryption thing. also used the default github repo name for this one.☆70Updated last year
- A PoC tool for exploiting leaked process and thread handles☆30Updated last year
- Small tool to play with IOCs caused by Imageload events☆42Updated last year
- ☆14Updated 2 years ago
- Reimplementation of the KExecDD DSE bypass technique.☆47Updated 6 months ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- ☆43Updated last year
- A repository filled with ideas to break/detect direct syscall techniques☆27Updated 2 years ago
- Artemis - C++ Hell's Gate Syscall Implementation☆32Updated last year
- ☆39Updated 3 years ago
- Load a dynamic library from memory using a fuse mount☆30Updated last year
- Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping☆53Updated 2 years ago
- Enabled / Disable LSA Protection via BYOVD☆66Updated 3 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆27Updated 3 years ago
- ☆37Updated last month
- Windows x64 Process Injection via Ghostwriting with Dynamic Configuration☆29Updated 3 years ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆43Updated last year
- ☆26Updated 3 years ago
- ☆29Updated last year
- ☆52Updated 2 years ago
- Process Injection: APC Injection☆29Updated 4 years ago
- Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH☆46Updated 3 years ago