Alternatives and similar repositories for CVE-2025-26125:

Users that are interested in CVE-2025-26125 are comparing it to the libraries listed below

• Cracked5pider / earlycascade-injection
  early cascade injection PoC based on Outflanks blog post
  ☆209Updated 4 months ago
• xrombar / flower
  a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor
  ☆93Updated last year
• JanielDary / ImmoralFiber
  Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…
  ☆257Updated 6 months ago
• ColeHouston / Sunder
  Windows rootkit designed to work with BYOVD exploits
  ☆170Updated 2 months ago
• SaadAhla / D1rkInject
  Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…
  ☆177Updated last year
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆158Updated 9 months ago
• Maldev-Academy / GhostlyHollowingViaTamperedSyscalls
  Implementing the ghostly hollowing PE injection technique using tampered syscalls.
  ☆141Updated 2 weeks ago
• xalicex / Killers
  Exploitation of process killer drivers
  ☆198Updated last year
• Octoberfest7 / Secure_Stager
  An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution
  ☆184Updated 4 months ago
• itm4n / PPLrevenant
  Bypass LSA protection using the BYODLL technique
  ☆155Updated 6 months ago
• CICADA8-Research / COMThanasia
  A set of programs for analyzing common vulnerabilities in COM
  ☆200Updated 6 months ago
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆181Updated last year
• rbmm / SC_DEMO
  ☆110Updated 2 weeks ago
• NtDallas / KrakenMask
  Sleep obfuscation
  ☆210Updated 3 months ago
• ricardojoserf / NativeBypassCredGuard
  Bypass Credential Guard by patching WDigest.dll using only NTAPI functions
  ☆232Updated 3 months ago
• deepinstinct / DCOMUploadExec
  DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely
  ☆348Updated 3 months ago
• 0xHossam / HuffLoader
  Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.
  ☆106Updated last year
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.
  ☆149Updated 2 weeks ago
• boku7 / patchwerk
  BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)
  ☆172Updated last month
• rad9800 / FileRenameJunctionsEDRDisable
  ☆150Updated 3 months ago
• ZERODETECTION / MSC_Dropper
  ☆146Updated 7 months ago
• Maldev-Academy / Christmas
  ☆255Updated last year
• NtDallas / Ulfberht
  Shellcode loader
  ☆77Updated 4 months ago
• rtecCyberSec / Packer_Development
  Slides & Code snippets for a workshop held @ x33fcon 2024
  ☆256Updated 9 months ago
• lsecqt / ThreadlessInject-C-Implementation
  This repository implements Threadless Injection in C
  ☆161Updated last year
• Cracked5pider / CodeCave
  A bunch of scripts and code i wrote.
  ☆135Updated 4 months ago
• voidvxvt / HellBunny
  Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
  ☆98Updated 3 months ago
• scrt / PowerChell
  A PowerShell console in C/C++ with all the security features disabled
  ☆214Updated last week
• V-i-x-x / kernel-callback-removal
  kernel callback removal (Bypassing EDR Detections)
  ☆130Updated last week
• rasta-mouse / process-inject-kit
  Port of Cobalt Strike's Process Inject Kit
  ☆171Updated 3 months ago