A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.sys)
☆69Sep 21, 2026Updated last month
Alternatives and similar repositories for MSRKit
Users that are interested in MSRKit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated 2 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆79Sep 19, 2026Updated last month
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆108Oct 27, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 3 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆173Oct 8, 2026Updated 3 weeks ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆40Oct 14, 2026Updated 3 weeks ago
- Proof of concept to detect module stomping detection by looking for modified .pdata sections.☆41Jun 11, 2026Updated 4 months ago
- Versatile SOCKS5 proxying tool☆16Jun 28, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆265Sep 29, 2026Updated last month
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆37Feb 17, 2026Updated 8 months ago
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated last month
- Cobalt Strike BOF that extracts selected Windows registry hives directly from a raw NTFS volume by parsing NTFS metadata and reading file…☆112Oct 11, 2026Updated 3 weeks ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆36Oct 28, 2026Updated last week
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- How Windows kernel exploits work, and which defenses still stop them: 157 dissected CVE case studies, dated bypass verdicts per build and…☆82Updated this week
- 0-Click RCE for XWorm -> v7.5 (latest)☆17Oct 22, 2026Updated 2 weeks ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆160Sep 27, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Offensive PoC tool for BTR.sys - Microsoft Defender's Boot Time Removal Tool. Supporting material for the BTR Reforged research (Black Ha…☆148Aug 20, 2026Updated 2 months ago
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆43Oct 22, 2026Updated 2 weeks ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆155Aug 18, 2026Updated 2 months ago
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- HVCI/kCET-aware bugcheck suppressor PoC☆22May 11, 2026Updated 5 months ago
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- Set of PoC to abuse Windows minifilters functionality☆112May 1, 2026Updated 6 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆75Jul 14, 2026Updated 3 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆72Jul 12, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PIC shellcode agent based on Stardust framework and Crystal Palace☆94Updated this week
- Debugger utilizing stealth hooks to hide from debugger detection☆27Aug 22, 2026Updated 2 months ago
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆49Oct 18, 2026Updated 2 weeks ago
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆19Sep 21, 2026Updated last month
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆58Jul 8, 2026Updated 3 months ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆66Jun 15, 2026Updated 4 months ago
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated 3 weeks ago