Windows KASLR bypass using prefetch side-channel
☆213Apr 26, 2024Updated 2 years ago
Alternatives and similar repositories for prefetch-tool
Users that are interested in prefetch-tool are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Exploit targeting NT kernel in 24H2 Windows Insider Preview☆153Apr 26, 2024Updated 2 years ago
- CVE-2025-50168 Exploit PoC — Pwn2Own Berlin 2025 - LPE(Windows 11) winning bug.☆146Nov 3, 2025Updated 10 months ago
- Reports and POCs for CVE 2024-43570 and CVE-2024-43535☆31Jun 7, 2025Updated last year
- Proof-of-Concept for CVE-2024-26218☆56Apr 26, 2024Updated 2 years ago
- Techniques/tools on Windows kernel exploitation☆270Sep 1, 2026Updated 3 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆261May 18, 2026Updated 4 months ago
- A tool that is used to hunt vulnerabilities in x64 WDM drivers☆474Jun 18, 2026Updated 3 months ago
- Virtual Trust Level (VTL 1) secure call tracing☆106Jul 19, 2026Updated 2 months ago
- Leaking kernel addresses from ETW consumers. Requires Administrator privileges.☆92Nov 6, 2025Updated 10 months ago
- POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY☆232Apr 12, 2025Updated last year
- Harness to issue Virtual Secure Mode (VSM) "secure calls" from VTL 0 to VTL 1☆83Sep 8, 2025Updated last year
- ☆268Jul 8, 2025Updated last year
- Admin to Kernel code execution using the KSecDD driver☆272Apr 19, 2024Updated 2 years ago
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆258Jul 5, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Find out how to bypass HVCI (or not). My own research on Microsoft Warbird (specifically in clipsp.sys)☆101Oct 26, 2025Updated 10 months ago
- Unofficial Common Log File System (CLFS) Documentation☆191Oct 5, 2021Updated 4 years ago
- Security research helper for CLFS drivers☆16Sep 5, 2024Updated 2 years ago
- test☆107Apr 25, 2026Updated 5 months ago
- LPE exploit for CVE-2023-36802☆164Oct 10, 2023Updated 2 years ago
- ☆56Mar 26, 2025Updated last year
- Demonstrate calling a kernel function and handle process creation callback against HVCI☆86Dec 21, 2022Updated 3 years ago
- Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation☆129Mar 22, 2024Updated 2 years ago
- ☆146Mar 29, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Analysis of the vulnerability☆51Jan 23, 2024Updated 2 years ago
- Minimalistic HTTP(S) client for the NT kernel☆60Dec 1, 2025Updated 9 months ago
- Proof of concept & details for CVE-2025-21298☆197Jan 20, 2025Updated last year
- Kernel Information Disclosure☆35Jan 13, 2026Updated 8 months ago
- Proof of Concept CVE-2025-21420 (Windows Disk Cleanup Tool EoP)☆56Jun 12, 2025Updated last year
- A Reflective Loader for macOS☆150Jul 20, 2025Updated last year
- Proof-of-Concept for CVE-2024-21345☆77Apr 26, 2024Updated 2 years ago
- Exploiting the KsecDD Windows driver through Server Silos☆88Nov 11, 2024Updated last year
- ☆41Jul 9, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- a tool used to analyze and monitor in named pipes☆202Oct 27, 2024Updated last year
- ☆251Mar 13, 2026Updated 6 months ago
- A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analys…☆74Jul 31, 2026Updated last month
- "Bypassing" HVCI via donor PFN swaps to modify read-only code pages. Call chained kernel functions (kCET and SLAT support), and more.☆134Mar 16, 2026Updated 6 months ago
- HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion☆68Apr 22, 2025Updated last year
- Windows rootkit designed to work with BYOVD exploits☆225Jan 18, 2025Updated last year
- Windbg extension port for rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.☆13Updated this week