forrest-orr / ExploitDev
Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/
☆36Updated 3 years ago
Alternatives and similar repositories for ExploitDev:
Users that are interested in ExploitDev are comparing it to the libraries listed below
- A C implementation of the Sektor7 "A Thief" Windows privesc technique.☆61Updated 2 years ago
- ☆37Updated 3 years ago
- ☆79Updated 4 months ago
- Piece of code to detect and remove hooks in IAT☆62Updated 2 years ago
- Enabled / Disable LSA Protection via BYOVD☆65Updated 3 years ago
- Recreating and reviewing the Windows persistence methods☆39Updated 3 years ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆98Updated last year
- A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯☆39Updated 4 years ago
- A proof of concept I developed to improve Gargoyle back in 2018 to achieve true memory obfuscation from position independent code☆40Updated 4 months ago
- Next gen process injection technique☆43Updated 4 years ago
- A small commented POC for removing API hooks placed by AV/EDR.☆33Updated 4 years ago
- ☆54Updated 3 years ago
- Small tool to play with IOCs caused by Imageload events☆42Updated last year
- API Hammering with C++20☆42Updated 2 years ago
- Overwrite a process's recovery callback and execute with WER☆102Updated 2 years ago
- A simple COM server which provides a component to run shellcode☆132Updated 4 years ago
- GetModuleHandle (via PEB) and GetProcAddress (via EAT) like☆32Updated 2 years ago
- Files for http://blog.deniable.org/posts/windows-callbacks/☆69Updated 2 years ago
- Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH☆44Updated 3 years ago
- An example of COM hijacking using a proxy DLL.☆25Updated 3 years ago
- ☆109Updated 2 years ago
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆60Updated last year
- Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping☆45Updated 2 years ago
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆98Updated last year