Reflective DLL that hooks the creation of the UAC prompt popped by explorer.exe for privilege escalation.
☆20Feb 20, 2021Updated 5 years ago
Alternatives and similar repositories for UACHooker
Users that are interested in UACHooker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Two C# RunPE's capable of x86 and x64 injections☆10Dec 2, 2018Updated 7 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆27Sep 8, 2021Updated 5 years ago
- PE Injection with ring3 hook bypass☆11May 3, 2021Updated 5 years ago
- CobaltStrike AggressorScripts for the lazy☆10Jul 22, 2022Updated 4 years ago
- Python script to patch the reflective stub in a DLL☆24Apr 9, 2017Updated 9 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Collection of Jupyter notebooks☆13Mar 11, 2021Updated 5 years ago
- This is a project to receive Base64 data and decode it in process☆15Mar 16, 2020Updated 6 years ago
- Techniques that i have used to evade anti-virus during pen tests.☆13May 29, 2018Updated 8 years ago
- Bypass UAC at any level by abusing the Task Scheduler and environment variables☆35Jul 12, 2021Updated 5 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆34Jun 12, 2020Updated 6 years ago
- My implementation of Halo's Gate technique in C#☆51Apr 20, 2022Updated 4 years ago
- This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…☆54Nov 4, 2021Updated 5 years ago
- FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…☆48Apr 6, 2025Updated last year
- A proof of concept of real custom GetProcAddress and GetModuleBaseAddress☆20Jul 9, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Shifting.Codes☆30Feb 21, 2026Updated 8 months ago
- ☆14Apr 7, 2018Updated 8 years ago
- Transparently call NTAPI via Halo's Gate with indirect syscalls.☆13Apr 26, 2024Updated 2 years ago
- DarkCrypter encrypts your files and generates undetectable payloads to evade all anti-virus vendors.☆21Sep 1, 2022Updated 4 years ago
- ☆19Mar 21, 2020Updated 6 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- This is a Poc for BIGIP iControl unauth RCE☆51Mar 17, 2021Updated 5 years ago
- Fake Timestamps of Driver Certificates while keeping validity.☆19Jul 15, 2021Updated 5 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Oct 31, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Hide code from dnSpy and other C# spying tools☆42Oct 18, 2020Updated 6 years ago
- CVE-2019-1064 Local Privilege Escalation Vulnerability☆11Jun 12, 2019Updated 7 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆30Nov 9, 2021Updated 4 years ago
- A simple rootkit to hide a process☆48Jan 10, 2014Updated 12 years ago
- ☆13Sep 22, 2019Updated 7 years ago
- KcpNatProxy is a reverse proxy to help you expose a local TCP/UDP server behind a NAT or firewall to the Internet.☆12Nov 20, 2021Updated 4 years ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆142Sep 12, 2022Updated 4 years ago
- A CUSTOM CODED FUD DLL, CODED IN C , WHEN LOADED , VIA A DECOY WEB-DELIVERY MODULE( FIRING A DECOY PROGRAM), WILL GIVE A REVERSE SHELL (P…☆35Jun 4, 2019Updated 7 years ago
- Win32 PE Anti-RE and Anti-debugging Framework☆13May 14, 2019Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- Server/Client SOCKS5 (RFC 1928) in Reverse mode on Windows☆39Feb 18, 2019Updated 7 years ago
- Process Hollowing☆12Sep 13, 2017Updated 9 years ago
- DarkRats Standalone HVNC☆23May 20, 2022Updated 4 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- A C# DLL Wrapper Generator☆12Feb 23, 2022Updated 4 years ago
- ☆123Dec 23, 2022Updated 3 years ago