bytecode77 / slui-file-handler-hijack-privilege-escalationLinks
Slui File Handler Hijack UAC Bypass Local Privilege Escalation
☆95Updated 5 months ago
Alternatives and similar repositories for slui-file-handler-hijack-privilege-escalation
Users that are interested in slui-file-handler-hijack-privilege-escalation are comparing it to the libraries listed below
Sorting:
- Windows 10 CDPSvc DLL Hijacking - From LOCAL SERVICE to SYSTEM☆114Updated 5 years ago
- Weaponizing Gigabyte driver for priv escalation and bypass PPL☆69Updated 6 years ago
- PoC designed to evade userland-hooking anti-virus.☆90Updated 6 years ago
- Lonely x64 binary to Bypass Win10 UAC utilizing ALPC method with [command line]☆32Updated 2 years ago
- Use NT Native Registry API to create a registry that normal user can not query.☆95Updated 8 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆97Updated 6 years ago
- Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses☆42Updated 4 years ago
- Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers☆18Updated 4 years ago
- ☆65Updated 3 years ago
- The VBScript Obfuscator written in VBScript☆115Updated 3 years ago
- A kernel rootkit with remote command and control interface for windows☆109Updated 7 years ago
- Convert PE files to a shellcode☆80Updated 5 years ago
- ☆13Updated 8 years ago
- Bypass UAC by abusing the Internet Explorer Add-on installer☆55Updated 4 years ago
- C++ function that will automagically unhook a specified Windows API☆62Updated 5 years ago
- XssBot-Модульный резидентный бот с супер админкой☆11Updated 2 years ago
- A simple COM server which provides a component to run shellcode☆140Updated 5 years ago
- Example code for EDR bypassing☆151Updated 6 years ago
- Assembly block for hooking windows API functions.☆93Updated 6 years ago
- ☆92Updated 4 years ago
- Shellcode to load an appended Dll☆91Updated 5 years ago
- Hollow Process / Dynamic Forking / RunPE injection technique implemented in Python☆54Updated 4 years ago
- Botnet system from deep-web Russians forums. Tiny Nuke!☆92Updated 8 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆106Updated 4 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆37Updated 10 years ago
- Gozi ISFB is a well-known and widely distributed banking trojan, and has been in the threat landscape for the past several years.☆65Updated 7 years ago
- Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.☆78Updated 2 years ago
- Process Hollowing demonstration & explanation☆34Updated 4 years ago
- medium-rare☆28Updated 6 years ago
- Bare template for a Kernel Mode Driver☆51Updated 5 years ago