alfarom256 / LogMeInPoCHandleDupLinks
☆64Updated last year
Alternatives and similar repositories for LogMeInPoCHandleDup
Users that are interested in LogMeInPoCHandleDup are comparing it to the libraries listed below
Sorting:
- ☆148Updated last year
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Updated 10 months ago
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆117Updated last year
- ☆29Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆105Updated last year
- Find DLLs with RWX section☆80Updated 2 years ago
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆121Updated 11 months ago
- A more reliable way of resolving syscall numbers in Windows☆52Updated last year
- "Service-less" driver loading☆163Updated last year
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆121Updated last year
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆104Updated last year
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆50Updated last year
- ☆62Updated last year
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆78Updated last year
- ☆159Updated 11 months ago
- Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers☆125Updated last year
- ☆31Updated 11 months ago
- ☆105Updated last year
- ☆51Updated 8 months ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Updated 2 years ago
- ☆77Updated last year
- A collection of position independent coding resources☆100Updated 2 weeks ago
- From C to binary shellcode converter.☆48Updated 2 weeks ago
- ☆115Updated last year
- Bypass user-land hooks by syscall tampering via the Trap Flag☆134Updated 3 months ago
- ☆108Updated last year
- Folder Or File Delete to Get System Shell on Current Session Desktop☆47Updated 10 months ago
- Local & remote Windows DLL Proxying☆169Updated last year
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆106Updated 10 months ago
- Demoting PPL anti-malware services to less than a guest user☆64Updated 10 months ago