ProcExp Driver (Ab)use
☆21Dec 28, 2022Updated 3 years ago
Alternatives and similar repositories for Passenger
Users that are interested in Passenger are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆27Apr 24, 2025Updated last year
- Modified version of Impacket to use dynamic NTLMv2 Challenge/Response☆19Dec 26, 2022Updated 3 years ago
- Use powershell to getsystem with token dumplication☆10Dec 6, 2019Updated 6 years ago
- A BOF/COFF loader implemented in Go and CGO.☆23Jan 16, 2024Updated 2 years ago
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆15Dec 30, 2023Updated 2 years ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Feb 11, 2024Updated 2 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- A tool to Impersonate logged on users without touching LSASS (Including non-Interactive sessions).☆91Nov 23, 2022Updated 3 years ago
- Remote process shellcode injection with interactive output via named pipes☆52Jan 10, 2024Updated 2 years ago
- Process hollowing injection technique for Red Team operations☆19Sep 18, 2023Updated 3 years ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- AddDefenderExclusions Beacon Object File☆42Jun 25, 2023Updated 3 years ago
- Use hardware breakpoint to dynamically change SSN in run-time☆280Apr 10, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously☆31Feb 3, 2023Updated 3 years ago
- Zero EAT touch way to retrieve function addresses (GetProcAddress on steroids)☆147Mar 16, 2024Updated 2 years ago
- ☆31Aug 7, 2023Updated 3 years ago
- A method to execute shellcode using RegisterWaitForInputIdle API.☆53Apr 4, 2023Updated 3 years ago
- Code with Windows Hacker☆12Oct 14, 2022Updated 4 years ago
- Go library to allow native inline hooking in windows at runtime☆15Feb 7, 2024Updated 2 years ago
- Little tool and (header-only lib) to investigate Windows Internals. Shout out to @zodiacon. No pull requests (this is actually a mirrored…☆13Nov 10, 2025Updated 11 months ago
- C# AV/EDR Killer using less-known driver (BYOVD)☆189Nov 10, 2023Updated 2 years ago
- Obfuscated, FUD Simple PowerShell Reverse Shell One-Liner☆80Nov 2, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Stealthy Lsass Dumper - can abuse ProcExp152.sys driver to dump PPL Lsass, no dbghelp.lib calls.☆326Jan 31, 2023Updated 3 years ago
- A swiss army knife tool for running, injecting and organizing your BOFs collection☆78Oct 1, 2026Updated last month
- ☆146May 17, 2023Updated 3 years ago
- ☆35Dec 6, 2023Updated 2 years ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆170Jan 4, 2024Updated 2 years ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆250Jun 11, 2024Updated 2 years ago
- 「⚙️」Detect which native Windows API's (NtAPI) are being hooked☆40Dec 7, 2024Updated last year
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆66Feb 11, 2024Updated 2 years ago
- Small PoC of using a Microsoft signed executable as a lolbin.☆137Feb 27, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆13May 20, 2023Updated 3 years ago
- ☆51Aug 23, 2022Updated 4 years ago
- ☆123Mar 28, 2025Updated last year
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆80Feb 8, 2023Updated 3 years ago
- Uses rpcdump to locate the ADCS server, and identify if ESC8 is vulnerable from unauthenticated perspective.☆84Sep 13, 2024Updated 2 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago