Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/
☆42Jul 22, 2021Updated 5 years ago
Alternatives and similar repositories for ExploitDev
Users that are interested in ExploitDev are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Experiment building lifting-bits dependencies with pure CMake. Migrated to:☆21Oct 8, 2024Updated last year
- Phantom DLL hollowing PoC☆371May 23, 2022Updated 4 years ago
- ☆28Aug 8, 2021Updated 5 years ago
- ☆13Jul 15, 2021Updated 5 years ago
- ☆12Sep 29, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Corsair LL Access driver abuse☆25Apr 16, 2021Updated 5 years ago
- Simple project using syscalls (via Syswhispers2) to execute MessageBox shellcode.☆76Nov 12, 2021Updated 4 years ago
- Collection of shellcode injection and execution techniques☆17Mar 17, 2026Updated 6 months ago
- ☆16Nov 24, 2020Updated 5 years ago
- A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.☆166Sep 10, 2021Updated 5 years ago
- A windows 11 rootkit in Rust☆19Mar 23, 2025Updated last year
- PetitPotam fork with Kerberos support in the impacket script☆17Aug 3, 2021Updated 5 years ago
- Run Processes as PPL with ELAM☆184Mar 17, 2022Updated 4 years ago
- A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of m…☆147May 23, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A bunch of scripts and code i wrote.☆154Nov 7, 2024Updated last year
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆10Jul 24, 2024Updated 2 years ago
- Remove API hooks from a Beacon process.☆77Mar 13, 2022Updated 4 years ago
- FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!☆363Sep 1, 2022Updated 4 years ago
- ☆18Mar 1, 2021Updated 5 years ago
- WhoAmI by asking the LDAP service on a domain controller.☆67Feb 8, 2022Updated 4 years ago
- .lib file for linking against the NT CRT☆19Mar 18, 2022Updated 4 years ago
- The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls☆249Jan 20, 2024Updated 2 years ago
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A pwning environment, now on docker!☆18Jul 3, 2021Updated 5 years ago
- Weaponizing CLRvoyance for Post-Ex .NET Execution☆38Jul 15, 2021Updated 5 years ago
- Some research on AltSystemCallHandlers functionality in Windows 10 20H1 18999☆243Nov 6, 2019Updated 6 years ago
- ☆51Sep 18, 2020Updated 6 years ago
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆25Mar 26, 2020Updated 6 years ago
- Subtract one PE file from another!☆20Oct 1, 2021Updated 4 years ago
- Python 3 - Manipulation and conversation with different data type (Bytes operations)☆28Feb 15, 2022Updated 4 years ago
- An example pattern in C# for using WMI to monitor process creation and termination events.☆52Aug 13, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Simple PoCs for utilizing Windows syscalls in Go☆15Jan 13, 2021Updated 5 years ago
- quotes i like.☆17Aug 1, 2019Updated 7 years ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆11Jul 25, 2023Updated 3 years ago
- ☆44Oct 16, 2023Updated 2 years ago
- XOR crypt/decrypt using C#☆12Sep 30, 2020Updated 5 years ago
- ☆10Jun 11, 2022Updated 4 years ago
- Binary Ninja plugin to perform automated analysis of Windows drivers☆20Aug 8, 2019Updated 7 years ago