Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks
☆82Oct 12, 2026Updated 3 weeks ago
Alternatives and similar repositories for LogonStealer
Users that are interested in LogonStealer are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Handle Redirect via BYOVD Kernel Read/Write☆22Sep 13, 2026Updated last month
- Crypter developed in Rust, featuring the implementation of various injection and evasion techniques, and including a builder with an intu…☆22Jul 18, 2026Updated 3 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- Another Injection Technique which eliminates creations of thread in remote process☆29Jul 7, 2026Updated 4 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆160Sep 27, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Process ID Mutator via BYOVD Kernel R/W☆22Sep 6, 2026Updated 2 months ago
- C++ Implementation to Hide File in ADS with the option of Encrpytion + Fragmentation☆13Dec 18, 2024Updated last year
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 3 months ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆265Sep 29, 2026Updated last month
- ☆15Aug 19, 2026Updated 2 months ago
- Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueAp…☆81Feb 17, 2026Updated 8 months ago
- A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models☆39Oct 14, 2026Updated 3 weeks ago
- The home to the popular script named Voidware☆18Feb 10, 2025Updated last year
- another PrivEsc potato...☆122Sep 5, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.☆55Aug 24, 2026Updated 2 months ago
- dissect little PE/PE32+ malware samples☆11Apr 2, 2026Updated 7 months ago
- Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime☆109Mar 29, 2026Updated 7 months ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆15Jul 17, 2026Updated 3 months ago
- Cobalt Strike Beacon Object File to to change the user's desktop wallpaper☆18Sep 15, 2023Updated 3 years ago
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆94Updated this week
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆108Oct 27, 2026Updated last week
- ☆55May 31, 2025Updated last year
- Collection of custom implementations or Userland Primitives about some WinAPI functions☆47Oct 5, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 3 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- A template for Rust based BOF-PEs☆25Apr 5, 2026Updated 7 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆162Jul 15, 2026Updated 3 months ago
- Offset Independent Credential Extraction Tool☆72Sep 2, 2025Updated last year
- User-mode ETW interception and telemetry manipulation lab for Windows security research.☆43Oct 22, 2026Updated 2 weeks ago
- Advanced in-memory process injection using transient SEC_IMAGE sections, custom crypter, and ADS payload delivery no disk traces, maximum…☆23Jun 12, 2025Updated last year
- Ditto is a Windows Mythic Agent for Chroimium Browsers that utilizes Chromium extensions as its base agent with optional sidecar attachme…☆34Oct 15, 2026Updated 3 weeks ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆72Jul 12, 2026Updated 3 months ago
- Abusing the win32k.sys kernel callback mechanism for arbitrary code execution☆121Apr 10, 2026Updated 6 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shel…☆79Jun 24, 2026Updated 4 months ago
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret from Chrome p…☆35Updated this week
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆155Apr 18, 2025Updated last year
- Various techniques used to bypass SMEP in the Windows Kernel.☆21Apr 20, 2025Updated last year