antifob / linux-prinjLinks
Linux process injection PoCs
☆31Updated last year
Alternatives and similar repositories for linux-prinj
Users that are interested in linux-prinj are comparing it to the libraries listed below
Sorting:
- A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in c…☆119Updated 2 years ago
- Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/☆37Updated 3 years ago
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆110Updated 8 months ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆39Updated last year
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆98Updated last year
- Detect strange memory regions and DLLs☆183Updated 3 years ago
- Aplos an extremely simple fuzzer for Windows binaries.☆69Updated 3 months ago
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆62Updated 2 years ago
- Experiment on reproducing Obfuscate & Sleep☆145Updated 4 years ago
- Inter-Process Communication Mechanisms☆28Updated 4 years ago
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Updated 5 months ago
- Find DLLs with RWX section☆81Updated last year
- call gates as stable comunication channel for NT x86 and Linux x86_64☆31Updated last year
- ☆82Updated 9 months ago
- ☆136Updated last year
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆120Updated last year
- ☆46Updated 2 months ago
- ☆12Updated 3 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆105Updated 2 years ago
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆115Updated 5 months ago
- A more reliable way of resolving syscall numbers in Windows☆49Updated last year
- A simple PoC to invoke an encrypted shellcode by using an hidden call☆116Updated 2 years ago
- API Hammering with C++20☆47Updated 2 years ago
- Enabled / Disable LSA Protection via BYOVD☆68Updated 3 years ago
- Attacking the cleanup_module function of a kernel module☆34Updated 2 months ago
- ☆61Updated last year
- Dumping LSASS by Unhooking MiniDumpWriteDump by getting a fresh DbgHelp.dll copy from the disk , plus functions and strings obfuscation☆31Updated 2 years ago
- ☆30Updated 5 months ago
- A C++ PoC implementation for enumerating Windows Fibers directly from memory☆19Updated last year
- ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Sysc…☆117Updated last month