fortra / CVE-2024-6768
☆16Updated 7 months ago
Alternatives and similar repositories for CVE-2024-6768:
Users that are interested in CVE-2024-6768 are comparing it to the libraries listed below
- Threadless injection via TLS callbacks☆16Updated 4 months ago
- Windows AppLocker Driver (appid.sys) LPE☆53Updated 8 months ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- Callstack spoofing using a VEH because VEH all the things.☆19Updated 2 weeks ago
- CVE-2024-40431+CVE-2022-25479 chain for EOP(DATA ONLY ATTACK)☆44Updated 5 months ago
- ☆12Updated last year
- Progress of learning kernel development☆14Updated 2 years ago
- Released presentations of my talks + code that used during these talks☆13Updated 6 months ago
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆16Updated 8 months ago
- Random CVEs☆30Updated last year
- Windows LPE Nday☆25Updated 11 months ago
- Evilbytecode-Gate resolves Windows System Service Numbers (SSNs) using two methods: analyzing the Guard CF Table in ntdll.dll and parsing…☆20Updated last month
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆12Updated 5 months ago
- A few examples of how to trap virtual memory access on Windows.☆29Updated 3 months ago
- ☆10Updated 3 months ago
- Reimplementation of the KExecDD DSE bypass technique.☆47Updated 6 months ago
- ☆24Updated 2 months ago
- ☆25Updated last month
- One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel☆43Updated last year
- A repository filled with ideas to break/detect direct syscall techniques☆27Updated 2 years ago
- ☆21Updated 11 months ago
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆26Updated 7 months ago
- ☆29Updated last year
- the Open Source and Pure C++ Packer for eXecutables☆18Updated 2 years ago
- PoC for the Untrusted Pointer Dereference in the appid.sys driver☆16Updated 11 months ago
- Offensive Assembly code snippets.☆12Updated last year
- call gates as stable comunication channel for NT x86 and Linux x86_64☆31Updated last year
- Hooked create process injection for meterpreter☆23Updated 3 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆36Updated last year