alfarom256 / LogMeInPoCHandleDupLinks
☆64Updated last year
Alternatives and similar repositories for LogMeInPoCHandleDup
Users that are interested in LogMeInPoCHandleDup are comparing it to the libraries listed below
Sorting:
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Updated last year
- ☆150Updated last year
- A more reliable way of resolving syscall numbers in Windows☆52Updated last year
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆119Updated last year
- ☆103Updated last year
- Find DLLs with RWX section☆80Updated 2 years ago
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆104Updated last year
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆123Updated last year
- "Service-less" driver loading☆167Updated last year
- Aplos an extremely simple fuzzer for Windows binaries.☆68Updated 10 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆50Updated last year
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆123Updated last year
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆324Updated 2 months ago
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆107Updated last year
- Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers☆125Updated last year
- CVE-2024-30090 - LPE PoC☆107Updated last year
- Local & remote Windows DLL Proxying☆169Updated last year
- ☆31Updated last year
- ☆52Updated 9 months ago
- ☆79Updated last year
- ☆31Updated last year
- ☆106Updated last year
- ☆60Updated 8 months ago
- ☆64Updated last year
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Updated 2 years ago
- Splitting and executing shellcode across multiple pages☆103Updated 2 years ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated 2 years ago
- Activation Context Hijack☆168Updated 5 months ago
- ☆159Updated last year
- Bypass user-land hooks by syscall tampering via the Trap Flag☆137Updated 4 months ago