bruno-1337 / SeDebugPrivilege-ExploitLinks
Simple C++ PoC of SeDebugPrivilege Privesc
☆27Updated last year
Alternatives and similar repositories for SeDebugPrivilege-Exploit
Users that are interested in SeDebugPrivilege-Exploit are comparing it to the libraries listed below
Sorting:
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆90Updated 7 months ago
- Create Anti-Copy DRM Malware☆71Updated last year
- The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section☆110Updated 2 years ago
- Remotely Enumerate sessions using undocumented Windows Station APIs☆118Updated last year
- ☆45Updated 3 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 8 months ago
- Leverage WindowsApp createdump tool to obtain an lsass dump☆153Updated last year
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆89Updated 10 months ago
- ☆55Updated 3 years ago
- Execute commands in other Sessions☆91Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated 2 years ago
- A BOF to enumerate system process, their protection levels, and more.☆124Updated last year
- I have documented all of the AMSI patches that I learned till now☆75Updated 2 months ago
- .NET deserialization hunter☆81Updated last year
- Abuse leaked token handles.☆134Updated 2 years ago
- ☆18Updated last year
- A repository holding Proof of Concepts for executing the calculator application via different file formats☆42Updated last year
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆154Updated 9 months ago
- Tool to obtain hash using MS-SNTP for user accounts☆28Updated 11 months ago
- To audit the security of read-only domain controllers☆118Updated 2 years ago
- A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …☆91Updated 3 years ago
- PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy☆36Updated 2 years ago
- .bin file to shellcode convertor☆39Updated last year
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆122Updated last year
- ☆109Updated 11 months ago
- Terminate AV/EDR leveraging BYOVD attack☆102Updated 10 months ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆128Updated last year
- Local & remote Windows DLL Proxying☆169Updated last year
- ☆92Updated last year