My notes while studying Windows exploitation
☆194Mar 27, 2026Updated 7 months ago
Alternatives and similar repositories for windows-exploitation
Users that are interested in windows-exploitation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- My notes while studying Windows internals☆499Sep 22, 2026Updated last month
- Intel / AMD CPU Internals☆1,215Oct 16, 2026Updated 2 weeks ago
- Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.☆242Sep 26, 2023Updated 3 years ago
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A C++ syscall ID extractor for Windows. Developed, debugged and tested on 20H2.☆22May 25, 2021Updated 5 years ago
- windows rootkit☆60May 2, 2024Updated 2 years ago
- Examples of leaking Kernel Mode information from User Mode on Windows☆646Jul 7, 2017Updated 9 years ago
- Bypass Malware Sandbox Evasion Ram check☆140Jan 3, 2023Updated 3 years ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- Kernel Detective☆155May 24, 2026Updated 5 months ago
- This is a collection of interesting codes about Windows Process creation.☆241Jan 12, 2024Updated 2 years ago
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module☆425Sep 13, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Small driver that uses alternative syscalls feature☆17May 9, 2024Updated 2 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆245Nov 6, 2019Updated 6 years ago
- Offensive Assembly code snippets.☆15Jul 12, 2023Updated 3 years ago
- Analyze Windows x64 Kernel Memory Layout☆134Nov 19, 2020Updated 5 years ago
- ☆19Oct 31, 2022Updated 3 years ago
- Collect different versions of Crucial modules.☆148Jul 11, 2024Updated 2 years ago
- Windows system repair tool☆18Jun 2, 2021Updated 5 years ago
- Splitting and executing shellcode across multiple pages☆102Jun 8, 2023Updated 3 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Signtool for expired certificates☆524Jun 10, 2023Updated 3 years ago
- Page fault hook use ept (Intel Virtualization Technology)☆197Oct 19, 2016Updated 10 years ago
- "An Introduction to Windows Exploit Development" is an open sourced, free Windows exploit development course I created for the Southeast …☆42Apr 17, 2020Updated 6 years ago
- My repository to upload drivers from different books and all the information related to windows internals.☆171Aug 16, 2019Updated 7 years ago
- Simple project that demonstrates how an ETW consumer can be created just by using NTDLL☆154Feb 23, 2019Updated 7 years ago
- ☆271Jan 14, 2023Updated 3 years ago
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆68May 2, 2023Updated 3 years ago
- r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems☆11Aug 6, 2018Updated 8 years ago
- ☆55Dec 21, 2022Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Windows Research Kernel☆43May 16, 2026Updated 5 months ago
- Various methods of executing shellcode☆75Mar 27, 2023Updated 3 years ago
- Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.☆7,171Jul 1, 2026Updated 3 months ago
- Win32 and Kernel abusing techniques for pentesters☆983Sep 3, 2023Updated 3 years ago
- Kernel-based memory hacking framework communicating with a kernel driver via sockets.☆98May 25, 2021Updated 5 years ago
- Windows NT x64 syscall fuzzer☆647Sep 12, 2026Updated last month
- Reverse engineered source code of the autochk rootkit☆213Nov 1, 2019Updated 6 years ago