chompie1337 / Windows_LPE_AFD_CVE-2023-21768
LPE exploit for CVE-2023-21768
☆482Updated last year
Related projects ⓘ
Alternatives and complementary repositories for Windows_LPE_AFD_CVE-2023-21768
- LPE exploit for CVE-2023-21768☆416Updated last year
- DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.☆478Updated last year
- Collection of Windows Privilege Escalation (Analyse/PoC/Exploit)☆320Updated this week
- CWE-781: Improper Address Validation in IOCTL with METHOD_NEITHER I/O Control Code☆320Updated 4 months ago
- Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting☆359Updated last year
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆454Updated 9 months ago
- Bypassing UAC with SSPI Datagram Contexts☆414Updated last year
- ☆173Updated last year
- ☆506Updated 9 months ago
- A Highly capable Pe Packer☆684Updated 2 years ago
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆621Updated last year
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆629Updated last year
- A New Exploitation Technique for Visual Studio Projects☆445Updated last year
- UAC Bypass By Abusing Kerberos Tickets☆480Updated last year
- Complete list of LPE exploits for Windows (starting from 2023)☆395Updated last week
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆494Updated 7 months ago
- Sleep Obfuscation☆686Updated 11 months ago
- Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists☆383Updated last year
- shellcode loader for your evasion needs☆272Updated last week
- Proof-of-Concept for CVE-2023-38146 ("ThemeBleed")☆189Updated last year
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆564Updated last month
- Various ways to execute shellcode☆475Updated 8 months ago
- MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.☆493Updated 3 months ago
- TartarusGate, Bypassing EDRs☆534Updated 2 years ago
- Collection of UAC Bypass Techniques Weaponized as BOFs☆408Updated 9 months ago
- Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.☆383Updated last year
- Performing Indirect Clean Syscalls☆483Updated last year
- Protected Process Dumper Tool☆520Updated last year
- Cobalt Strike UDRL for memory scanner evasion.☆881Updated 5 months ago