Sh3lldon / WinPWN

Related projects ⓘ

Alternatives and complementary repositories for WinPWN

• therealdreg / dregate
  call gates as stable comunication channel for NT x86 and Linux x86_64
  ☆30Updated last year
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆42Updated 5 months ago
• GetRektBoy724 / SyscallShuffler
  Your NTDLL vaccine from modern direct syscall methods.
  ☆35Updated 2 years ago
• Cracked5pider / unguard-eat
  havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets
  ☆25Updated 3 months ago
• ommadawn46 / HEVD-BufferOverflowNonPagedPoolNx-Win10-22H2
  HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion
  ☆39Updated 3 months ago
• lleon1435 / Kernel_VADInjector
  Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver
  ☆51Updated last year
• matterpreter / cpuid
  A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class
  ☆24Updated last year
• zodiacon / MalDevWorkshopWebinar
  Demo from the Malware Analysis and Development Webinar
  ☆19Updated 7 months ago
• rbmm / RtlClone
  ☆27Updated 4 months ago
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated last year
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆40Updated 8 months ago
• lem0nSec / Dsebler
  Reimplementation of the KExecDD DSE bypass technique.
  ☆42Updated 2 months ago
• Crowdfense / CVE-2024-21338
  Windows AppLocker Driver (appid.sys) LPE
  ☆36Updated 3 months ago
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆45Updated last year
• NUL0x4C / GP
  using the gpu to hide your payload
  ☆47Updated 2 years ago
• Azvanzed / vmw-logger-rs
  A VMWare logger using built-in backdoor.
  ☆25Updated last month
• rad9800 / BloatedHammer
  API Hammering with C++20
  ☆34Updated 2 years ago
• Kharos102 / ReadWriteDriverSample
  ☆21Updated 6 months ago
• joaoviictorti / coffeeldr
  A COFF Loader written in Rust
  ☆26Updated 2 weeks ago
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆32Updated last year
• bluefrostsecurity / Windows-Drive-Remapping-EoP
  ☆27Updated last year
• rbmm / LdrpKernel32DllName
  ☆84Updated 5 months ago
• aaaddress1 / ntkrnlProtectScan
  One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel
  ☆43Updated last year
• SpiralBL0CK / CVE-2024-40431-CVE-2022-25479-EOP-CHAIN
  CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)
  ☆45Updated last month
• keowu / InstrumentationCallbackToolKit
  A fast method to intercept syscalls from any user-mode process using InstrumentationCallback and detect any process using Instrumentation…
  ☆22Updated last year
• zodiacon / NativePowers
  Native Powers Talk demos
  ☆14Updated last year
• rbmm / Services
  ☆18Updated last year
• passthehashbrowns / VectoredExceptionHandling
  ☆81Updated 3 months ago
• iDigitalFlame / XrMT
  e(X)tensiable (Rust) Malware Toolkit: (Soon!) Full Featured Rust C2 Framework with Awesome Features!
  ☆23Updated 3 months ago