cocomelonc / hack-process-hacker2
Proof of Concept example for abusing Process Hacker 2 (v2.39.124)
☆21Updated 4 months ago
Alternatives and similar repositories for hack-process-hacker2:
Users that are interested in hack-process-hacker2 are comparing it to the libraries listed below
- Windows AppLocker Driver (appid.sys) LPE☆51Updated 7 months ago
- In-memory hiding technique☆45Updated 2 months ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- API Hammering with C++20☆45Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆70Updated last year
- ☆21Updated 10 months ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆50Updated last year
- A (quite) simple steganography algorithm to hide shellcodes within bitmap image.☆21Updated 10 months ago
- A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…☆21Updated last year
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆42Updated last year
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆36Updated last year
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆31Updated last year
- Persistence via Shell Extensions☆64Updated last year
- Exploiting the KsecDD Windows driver through Server Silos☆50Updated 3 months ago
- BYOVD Technique Example using viragt64 driver☆30Updated 7 months ago
- ☆37Updated 2 weeks ago
- Enabled / Disable LSA Protection via BYOVD☆66Updated 3 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆54Updated 2 years ago
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆44Updated last month
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆26Updated 7 months ago
- HEVD Exploit: ArbitraryWrite on Windows 10 22H2 - Bypassing KVA Shadow and SMEP via PML4 Entry Manipulation☆24Updated 8 months ago
- A method to execute shellcode using RegisterWaitForInputIdle API.☆52Updated last year
- a demo module for the kaine agent to execute and inject assembly modules☆36Updated 6 months ago
- One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel☆43Updated last year
- Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.☆46Updated last year
- ☆38Updated 8 months ago
- Reimplementation of the KExecDD DSE bypass technique.☆46Updated 6 months ago
- ☆51Updated 2 years ago