forrest-orr / ExploitDev
Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/
☆36Updated 3 years ago
Alternatives and similar repositories for ExploitDev:
Users that are interested in ExploitDev are comparing it to the libraries listed below
- Piece of code to detect and remove hooks in IAT☆63Updated 2 years ago
- ☆82Updated 7 months ago
- ☆39Updated 3 years ago
- A C implementation of the Sektor7 "A Thief" Windows privesc technique.☆61Updated 3 years ago
- Next gen process injection technique☆45Updated 4 years ago
- Enabled / Disable LSA Protection via BYOVD☆66Updated 3 years ago
- Recreating and reviewing the Windows persistence methods☆36Updated 3 years ago
- ☆112Updated 2 years ago
- Small tool to play with IOCs caused by Imageload events☆42Updated last year
- API Hammering with C++20☆45Updated 2 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆33Updated 4 years ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆133Updated 2 years ago
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆61Updated 2 years ago
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆28Updated 2 years ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆100Updated 2 years ago
- A simple example on how to initiate a direct syscall on WoW64☆11Updated 7 years ago
- GetModuleHandle (via PEB) and GetProcAddress (via EAT) like☆32Updated 3 years ago
- Resolve syscall numbers at runtime for all Windows versions.☆61Updated 4 months ago
- ☆55Updated 3 years ago
- Experiment on reproducing Obfuscate & Sleep☆143Updated 4 years ago
- Sleep Obfuscation☆43Updated 2 years ago
- A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯☆40Updated 4 years ago
- Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping☆53Updated 2 years ago
- Inter-Process Communication Mechanisms☆26Updated 4 years ago
- ☆14Updated 2 years ago
- Files for http://blog.deniable.org/posts/windows-callbacks/☆72Updated 3 years ago
- Hacky code for extracting calls in DLLs by function☆14Updated 2 years ago
- ☆107Updated 2 years ago
- NT AUTHORITY\SYSTEM☆39Updated 4 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆105Updated 4 years ago