alfarom256 / LogMeInPoCHandleDupLinks
☆64Updated last year
Alternatives and similar repositories for LogMeInPoCHandleDup
Users that are interested in LogMeInPoCHandleDup are comparing it to the libraries listed below
Sorting:
- ☆148Updated last year
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Updated 10 months ago
- Find DLLs with RWX section☆80Updated 2 years ago
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆105Updated last year
- A more reliable way of resolving syscall numbers in Windows☆52Updated last year
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆104Updated last year
- ☆61Updated last year
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆121Updated 11 months ago
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆121Updated last year
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆117Updated last year
- ☆105Updated last year
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆77Updated last year
- ☆108Updated last year
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Updated 2 years ago
- ☆159Updated 10 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆48Updated last year
- ☆77Updated last year
- "Service-less" driver loading☆162Updated 11 months ago
- Aplos an extremely simple fuzzer for Windows binaries.☆67Updated 8 months ago
- ☆60Updated 6 months ago
- Bypass user-land hooks by syscall tampering via the Trap Flag☆131Updated 2 months ago
- Local & remote Windows DLL Proxying☆166Updated last year
- Splitting and executing shellcode across multiple pages☆103Updated 2 years ago
- Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers☆124Updated last year
- Folder Or File Delete to Get System Shell on Current Session Desktop☆46Updated 9 months ago
- ☆31Updated 11 months ago
- ☆28Updated last year
- A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.☆110Updated last year
- Demoting PPL anti-malware services to less than a guest user☆63Updated 9 months ago
- CVE-2024-30090 - LPE PoC☆108Updated last year