Alternatives and similar repositories for Abyss

Users that are interested in Abyss are comparing it to the libraries listed below

• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆68Updated 5 months ago
• xforcered / Windows_MSKSSRV_LPE_CVE-2023-36802
  LPE exploit for CVE-2023-36802
  ☆23Updated last year
• lem0nSec / Dsebler
  Reimplementation of the KExecDD DSE bypass technique.
  ☆53Updated last year
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆112Updated 2 years ago
• alfarom256 / MCP-PoC
  Minifilter Callback Patching Proof-of-Concept
  ☆74Updated 2 years ago
• synacktiv / keebcap
  Win32 keylogger that supports all (non-ime using) languages correctly
  ☆52Updated last year
• mrexodia / lolbin-poc
  Small PoC of using a Microsoft signed executable as a lolbin.
  ☆138Updated 2 years ago
• V-i-x-x / win11-kernel-execution-syscall-hijack
  Executing Kernel Routines via Syscall Table Hijack (Kernel Code Execution)
  ☆45Updated 3 months ago
• JanielDary / weetabix
  A C++ PoC implementation for enumerating Windows Fibers directly from memory
  ☆20Updated last year
• uf0o / windows-ps-callbacks-experiments
  Files for http://blog.deniable.org/posts/windows-callbacks/
  ☆76Updated 3 years ago
• synacktiv / windows_kernel_shadow_stack
  Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.
  ☆50Updated 4 months ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆116Updated 2 years ago
• Slowerzs / KeyJumper
  ☆50Updated 6 months ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆80Updated 3 years ago
• CaledoniaProject / drivers-binaries
  Exploitable drivers, you know what I mean
  ☆155Updated last week
• ommadawn46 / HEVD-Exploit-Win10-22H2-KVAS
  HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation
  ☆32Updated last year
• Crowdfense / CVE-2024-21338
  Windows AppLocker Driver (appid.sys) LPE
  ☆66Updated last year
• ldpreload / werkernel
  Windows LPE Nday
  ☆31Updated last year
• scrt / KexecDDPlus
  Exploiting the KsecDD Windows driver through Server Silos
  ☆74Updated 10 months ago
• rbmm / SC
  shell code example
  ☆62Updated last week
• XaFF-XaFF / Kernel-Process-Hollowing
  Windows x64 kernel mode rootkit process hollowing POC.
  ☆188Updated 2 years ago
• tyranid / windows-memory-access-traps
  A few examples of how to trap virtual memory access on Windows.
  ☆34Updated 9 months ago
• NUL0x4C / EtwSessionHijacking
  A Poc on blocking Procmon from monitoring network events
  ☆107Updated 2 months ago
• xct / CVE-2024-27460
  Plantronics Desktop Hub LPE
  ☆36Updated last year
• 0xPrimo / KMDllInjector
  kernel-mode DLL Injector
  ☆110Updated 5 months ago
• maziland / StackBombing
  Next gen process injection technique
  ☆54Updated 5 years ago
• Reijaff / offensive_c
  ☆42Updated 2 years ago
• rad9800 / VehApiResolve
  ☆114Updated 3 years ago
• kr0tt / EarlyExceptionHandling
  Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH
  ☆122Updated last month
• bluefrostsecurity / Windows-Drive-Remapping-EoP
  ☆32Updated last year