Persistence techniques for windows.
☆19Jun 26, 2023Updated 3 years ago
Alternatives and similar repositories for awesome-persistence
Users that are interested in awesome-persistence are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A flexible and efficient binary pattern matching library designed to help you search and match binary data☆16Oct 29, 2025Updated last year
- automates exploits using ROP chains, using ntdll-scraper☆16May 26, 2022Updated 4 years ago
- Extra Python exploits from Impacket: wmiexec.py ntlmrelayx.py smbexec.py and more☆10Jun 12, 2020Updated 6 years ago
- This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …☆16Feb 14, 2023Updated 3 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆21Updated this week
- ☆49Jul 24, 2023Updated 3 years ago
- ☆16Jul 14, 2023Updated 3 years ago
- PE-Audit its a Powershell script that check for windows privilege escalation vector☆13Aug 3, 2026Updated 3 months ago
- [fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode☆13May 8, 2026Updated 5 months ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- A collection of tools, notes, & resources I've created during my OSCP certification journey.☆10Apr 25, 2021Updated 5 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Apr 5, 2022Updated 4 years ago
- ollvm, based on llvm-clang 5.0.2, 6.0.1, 7.0.1, 8.0, 9.0, 9.0.1☆19Apr 4, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Compileable POC of namazso's x64 return address spoofer.☆51Jun 10, 2020Updated 6 years ago
- Dorian is an intuitive high-level abstraction for declaring imperative programs that can be compiled or interpreted using LLVM and Cranel…☆20Jun 11, 2025Updated last year
- Windows NT port of 'Main is usually a function. So then when is it not?'☆28Mar 11, 2024Updated 2 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- A powerful and flexible tool to apply active attacks for disrupting stegomalware☆56Apr 28, 2022Updated 4 years ago
- VM escape (QEMU, VirtualBox, VMware)☆18Mar 21, 2022Updated 4 years ago
- Files for http://blog.deniable.org/posts/windows-callbacks/☆86Feb 26, 2022Updated 4 years ago
- ☆13Oct 12, 2025Updated last year
- A small tool for quickly generating LLVM passes☆29Sep 22, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows kernel driver template for cmkr (with testsigning).☆40Jul 8, 2023Updated 3 years ago
- Windows driver template, using C++20 & cmake & GithubActions☆25Aug 9, 2024Updated 2 years ago
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago
- Loads a signed kernel driver which allows you to map any driver to kernel mode without any traces of the signed / mapped driver.☆11Aug 8, 2021Updated 5 years ago
- Repository of different kernel drivers written while studying Windows NT Driver development☆12Apr 14, 2024Updated 2 years ago
- Implementation of the user-space eBPF VM based on the iovisor version (https://github.com/iovisor/ubpf)☆14Apr 16, 2020Updated 6 years ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- Piece of code to detect and remove hooks in IAT☆66May 30, 2022Updated 4 years ago
- Extended library for using direct system calls on windows☆17Feb 6, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A complete security assessment tool that supports common web security issues scanning and custom POC | Be sure to read the document befor…☆20Sep 27, 2024Updated 2 years ago
- ☆35Oct 18, 2022Updated 4 years ago
- XOrCryptEx lightweight C Utility/Algorithm☆13Mar 3, 2022Updated 4 years ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- a parser for the .map file included in the aimware leak☆18Feb 19, 2023Updated 3 years ago
- Simple program to stream offsets for your game cheat, Was reversing some p2c and decided to recreate a better version of this function fo…☆11Sep 12, 2022Updated 4 years ago
- (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…☆140Mar 3, 2025Updated last year