bytecode77 / slui-file-handler-hijack-privilege-escalationLinks
Slui File Handler Hijack UAC Bypass Local Privilege Escalation
☆95Updated 3 months ago
Alternatives and similar repositories for slui-file-handler-hijack-privilege-escalation
Users that are interested in slui-file-handler-hijack-privilege-escalation are comparing it to the libraries listed below
Sorting:
- Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM☆114Updated 5 years ago
- Lonely x64 binary to Bypass Win10 UAC utilizing ALPC method with [command line]☆32Updated 2 years ago
- Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses☆42Updated 4 years ago
- Weaponizing Gigabyte driver for priv escalation and bypass PPL☆69Updated 6 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆97Updated 6 years ago
- The VBScript Obfuscator written in VBScript☆115Updated 3 years ago
- Use NT Native Registry API to create a registry that normal user can not query.☆95Updated 7 years ago
- Botnet system from deep-web Russians forums. Tiny Nuke!☆92Updated 8 years ago
- Shellcode injector using direct syscalls☆123Updated 5 years ago
- Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers☆18Updated 4 years ago
- Example code for EDR bypassing☆150Updated 6 years ago
- C++ implant that interfaces with a SK8PARK server☆49Updated 4 years ago
- A kernel rootkit with remote command and control interface for windows☆109Updated 7 years ago
- C++ function that will automagically unhook a specified Windows API☆62Updated 5 years ago
- Disable Windows Defender Silently (ByPass TamperProtection & ByPass Trustednstaller)☆36Updated 5 years ago
- A simple COM server which provides a component to run shellcode☆140Updated 5 years ago
- Adds a user-mode asynchronous procedure call (APC) object to the APC queue of the specified thread and spoof the Parent Process.☆158Updated 6 years ago
- ☆13Updated 8 years ago
- AmsiScanBufferBypass using D/Invoke☆136Updated 4 years ago
- Convert PE files to a shellcode☆80Updated 5 years ago
- Bare template for a Kernel Mode Driver☆51Updated 5 years ago
- Bypass UAC by abusing the Internet Explorer Add-on installer☆55Updated 4 years ago
- Shellcode to load an appended Dll☆89Updated 4 years ago
- PoC designed to evade userland-hooking anti-virus.☆90Updated 6 years ago
- ☆50Updated 5 years ago
- https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/☆121Updated 6 years ago
- Evasive Process Hollowing Techniques☆141Updated 5 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆34Updated 5 years ago
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆77Updated 5 years ago
- Injects shellcode into remote processes using direct syscalls☆77Updated 4 years ago