alfarom256 / LogMeInPoCHandleDup
☆63Updated last year
Alternatives and similar repositories for LogMeInPoCHandleDup:
Users that are interested in LogMeInPoCHandleDup are comparing it to the libraries listed below
- Slides for COM Hijacking AV/EDR Talk on 38c3☆71Updated last month
- Find DLLs with RWX section☆76Updated last year
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆102Updated 5 months ago
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆115Updated 8 months ago
- "Service-less" driver loading☆148Updated 2 months ago
- ☆107Updated 3 months ago
- ☆143Updated 2 months ago
- A more reliable way of resolving syscall numbers in Windows☆48Updated last year
- Local & remote Windows DLL Proxying☆162Updated 8 months ago
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆95Updated last year
- ☆75Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆96Updated 10 months ago
- ☆134Updated last year
- ☆27Updated 9 months ago
- A Poc on blocking Procmon from monitoring network events☆100Updated 2 years ago
- ☆94Updated last month
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated 11 months ago
- Aplos an extremely simple fuzzer for Windows binaries.☆68Updated this week
- ☆85Updated 2 years ago
- A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust☆83Updated 10 months ago
- Construct the payload at runtime using an array of offsets☆61Updated 8 months ago
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆75Updated 6 months ago
- ☆103Updated 3 months ago
- ☆68Updated 6 months ago
- ☆180Updated last year
- a modified CONTEXT based ropchain to circumvent CFG-FindHiddenShellcode and EtwTi-FluctuationMonitor☆93Updated 10 months ago
- 32bit MIPS I VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆111Updated 2 months ago
- Simple BOF to read the protection level of a process☆114Updated last year
- Splitting and executing shellcode across multiple pages☆99Updated last year