Handle Redirect via BYOVD Kernel Read/Write
☆19Sep 13, 2026Updated last month
Alternatives and similar repositories for HandleRedirect
Users that are interested in HandleRedirect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Process Explorer vulnerable driver PPL Bypass☆27Sep 30, 2026Updated 3 weeks ago
- Process ID Mutator via BYOVD Kernel R/W☆20Sep 6, 2026Updated last month
- Selective In-Memory Syscall Unhooking, a stealthy method to bypass user-mode hooks in ntdll.dll☆45Mar 11, 2026Updated 7 months ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆82Sep 18, 2026Updated last month
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆41Sep 20, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks☆78Oct 12, 2026Updated last week
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆34Aug 4, 2026Updated 2 months ago
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆27Oct 16, 2026Updated last week
- LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.☆55Aug 24, 2026Updated last month
- Collection of Beacon Object Files (BOFs) that I wrote.☆43Aug 23, 2026Updated 2 months ago
- Situational Awareness commands implemented using Beacon Object Files☆32Oct 15, 2026Updated last week
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueAp…☆80Feb 17, 2026Updated 8 months ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆258Sep 29, 2026Updated 3 weeks ago
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 4 months ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆32Oct 16, 2026Updated last week
- ARM64 instruction emulator written in modern c++.☆40Sep 9, 2026Updated last month
- ☆21Feb 13, 2026Updated 8 months ago
- Modules designed to be used with the Conquest framework.☆22Sep 3, 2026Updated last month
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- Collection of custom implementations or Userland Primitives about some WinAPI functions☆47Oct 5, 2026Updated 2 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆30Jul 24, 2026Updated 2 months ago
- AD ACL Abuser for Havoc C2☆25Mar 30, 2026Updated 6 months ago
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆37Oct 1, 2026Updated 3 weeks ago
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆39Apr 14, 2026Updated 6 months ago
- ☆50Dec 5, 2025Updated 10 months ago
- modified mssqlclient from impacket to extract policies from the SCCM database☆52Feb 24, 2026Updated 7 months ago
- Dumping all keys from a keytab file☆21Dec 1, 2025Updated 10 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆90Aug 1, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 …☆13Oct 8, 2026Updated 2 weeks ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆74Oct 5, 2026Updated 2 weeks ago
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated last month
- Corscan is a Go-based tool that automates the detection and exploitation of CORS misconfigurations. It performs intelligent analysis of A…☆11Jul 16, 2025Updated last year
- SilentChrome-BOF is a BOF (Beacon Object File) that silently installs a browser extension into Chrome or Edge by modifying the Preference…☆30Apr 3, 2026Updated 6 months ago
- Another Injection Technique which eliminates creations of thread in remote process☆29Jul 7, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago