A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a crafted IOCTL request
☆26Apr 11, 2026Updated 6 months ago
Alternatives and similar repositories for CVE-2026-29923
Users that are interested in CVE-2026-29923 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- NSecSoftBYOVD POC☆63Feb 12, 2026Updated 8 months ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆42Apr 6, 2026Updated 6 months ago
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆18Updated this week
- ☆47Sep 1, 2026Updated last month
- PPLwindow PPL Bypass via GetProcessHandleFromHwnd☆55Dec 29, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation …☆132Feb 19, 2026Updated 8 months ago
- A tool to easily perform GitLab Device Code Phishing on red team engagements☆54Feb 9, 2026Updated 8 months ago
- A proof of concept that makes a Windows syscall look like it came from a legitimate Windows thread pool, with no trace of your own code a…☆15Jul 15, 2026Updated 3 months ago
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- Educational proof-of-concept demonstrating DEP/NX bypass using hardware breakpoints, vectored exception handling, and instruction emulati…☆101Oct 17, 2025Updated last year
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- A template for Rust based BOF-PEs☆25Apr 5, 2026Updated 6 months ago
- A PoC Cobalt Strike UDRL written in Rust☆34Sep 12, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…☆14Jan 18, 2026Updated 9 months ago
- BOF to manage Active Directory Integrated DNS (ADIDNS)☆28Jul 28, 2025Updated last year
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- Cobalt Strike Get clipboard plugin☆16Aug 11, 2023Updated 3 years ago
- Beacon Object file set service sd☆11Mar 6, 2023Updated 3 years ago
- Bof of RegPwn by MDSec☆129Mar 15, 2026Updated 7 months ago
- ☆27Dec 31, 2025Updated 9 months ago
- A full-fledged RtlVectoredExceptionHandler code written from scratch.☆18Oct 21, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Process Explorer vulnerable driver PPL Bypass☆27Sep 30, 2026Updated 3 weeks ago
- RunPE implementation with multiple evasive techniques (2)☆14Sep 25, 2025Updated last year
- Set of PoC to abuse Windows minifilters functionality☆111May 1, 2026Updated 5 months ago
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 10 months ago
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆64May 4, 2026Updated 5 months ago
- Evasion kit for Cobalt Strike☆16Aug 13, 2026Updated 2 months ago
- Reattempt of BlueHammer disclosed in April 2026☆68May 11, 2026Updated 5 months ago
- Some security by obscurity using port-jumping.☆14Jul 3, 2026Updated 3 months ago
- Cobalt Strike Beacon Object File to to change the user's desktop wallpaper☆18Sep 15, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Example of call stack spoofing trough the construction of syntetic frames and stack manipulation☆45Jan 17, 2026Updated 9 months ago
- ☆14Oct 7, 2025Updated last year
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆134Oct 4, 2024Updated 2 years ago
- User-Defined C2 BOF Template☆33Nov 24, 2025Updated 11 months ago
- WebClientRelayUp - an universal no-fix local privilege escalation in domain-joined windows workstations in default configuration.☆86Apr 28, 2026Updated 6 months ago
- A collection of DPAPI hunting and parsing BOFs☆39Mar 3, 2026Updated 7 months ago
- Windows Defender Manager is a tool that helps stop Windows Defender. It works with the Antimalware Service Executable of all versions of …☆46Jan 18, 2025Updated last year