Signal-Labs / Hotpatching_PoCLinks
☆22Updated 2 years ago
Alternatives and similar repositories for Hotpatching_PoC
Users that are interested in Hotpatching_PoC are comparing it to the libraries listed below
Sorting:
- really ?☆12Updated last year
- System Call Integrity Layer - experimental security research☆25Updated last week
- call gates as stable comunication channel for NT x86 and Linux x86_64☆32Updated 2 years ago
- Fuzzing Harness and Unpatched Crash Results from Fuzzing Defender MpEngine☆39Updated 6 months ago
- ☆35Updated 2 years ago
- Dangling COM Keys Finder☆17Updated 4 years ago
- A simple Linux in-memory .so loader☆33Updated 2 years ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆27Updated 2 years ago
- Extract data of TTD trace file to a minidump☆31Updated 2 years ago
- ☆26Updated 2 years ago
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆31Updated 4 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆31Updated 3 years ago
- CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)☆45Updated last year
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆42Updated last year
- A Practical example of ELAM (Early Launch Anti-Malware)☆36Updated 4 years ago
- ☆29Updated 2 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆36Updated 3 years ago
- A rust based DLL injection project☆31Updated 3 years ago
- ☆12Updated 3 years ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Updated 2 years ago
- Callstack spoofing using a VEH because VEH all the things.☆23Updated 10 months ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Updated 2 years ago
- Released presentations of my talks + code that used during these talks☆15Updated last year
- ☆60Updated 3 years ago
- Clone running process with ZwCreateProcess☆59Updated 5 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆45Updated 4 years ago
- A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.☆46Updated 3 years ago
- Hooking Heavens Gate in a weekend☆13Updated 4 years ago
- Repository of Microsoft Driver Block Lists based off of OS-builds☆42Updated last year
- Small tool to play with IOCs caused by Imageload events☆44Updated 2 years ago