This repository contains AI-generated analysis reports produced as part of an automated N-day research pipeline targeting Microsoft components.
☆107Oct 30, 2026Updated this week
Alternatives and similar repositories for nday-automation-ai
Users that are interested in nday-automation-ai are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repo contains PoCs for vulnerable Windows drivers.☆155Dec 20, 2025Updated 10 months ago
- Static binary instrumentation for windows kernel drivers, to use with winafl☆81Feb 5, 2025Updated last year
- DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and revers…☆346Dec 2, 2025Updated 10 months ago
- Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By…☆167Nov 23, 2025Updated 11 months ago
- Remove WPP calls from hexrays decompiled code☆58Jan 31, 2026Updated 8 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analys…☆83Jul 31, 2026Updated 3 months ago
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆350May 4, 2026Updated 5 months ago
- Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reacha…☆67Feb 26, 2026Updated 8 months ago
- Set of PoC to abuse Windows minifilters functionality☆111May 1, 2026Updated 5 months ago
- Overview of MS Defender☆167Feb 20, 2026Updated 8 months ago
- Autonomous Windows POC developer from patchwatch diff reports☆161Jul 30, 2026Updated 3 months ago
- CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution☆33Jan 13, 2026Updated 9 months ago
- Windows KASLR bypass using prefetch side-channel☆218Apr 26, 2024Updated 2 years ago
- Ruby On Rails unrestricted render() exploit☆16Feb 9, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆153Aug 18, 2026Updated 2 months ago
- ☆190Aug 27, 2026Updated 2 months ago
- Windows Snapshot Fuzzer (SNAFUzz)☆54Dec 17, 2025Updated 10 months ago
- PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation☆30Jul 15, 2026Updated 3 months ago
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆145Jul 7, 2026Updated 3 months ago
- Vulnerability detection framework by Binarly's REsearch team☆896Updated this week
- A collection of in-depth studies authored by me on JavaScript engine vulnerabilities.☆51Feb 6, 2026Updated 8 months ago
- Windows security research toolkit for LPE, persistence, COM hijacking, and attack surface enumeration.☆204Jun 13, 2026Updated 4 months ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆14Jul 17, 2026Updated 3 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆112Jun 22, 2026Updated 4 months ago
- A tool to automate MS Direct Send emails☆21Mar 16, 2026Updated 7 months ago
- An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. It lets MCP-compatible clie…☆94May 3, 2026Updated 5 months ago
- Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20…☆36Feb 27, 2025Updated last year
- Security research helper for CLFS drivers☆16Sep 5, 2024Updated 2 years ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- GitHub Action to alert on security patches before the CVE drops.☆224Oct 22, 2026Updated last week
- Toolkit for Windows internals, vulnerability analysis, and reproducible security research workflows.☆66Jun 23, 2026Updated 4 months ago
- Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.☆422Sep 3, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- Manipulation of Toast Notifications to social engineer the user to visit links, harvest credentials etc.☆51Mar 24, 2026Updated 7 months ago
- How Windows kernel exploits work, and which defenses still stop them: 157 dissected CVE case studies, dated bypass verdicts per build and…☆80Oct 2, 2026Updated 3 weeks ago
- Toolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits☆316Mar 23, 2026Updated 7 months ago
- Arbitrary file read in Claude Code☆15Jul 19, 2026Updated 3 months ago
- Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands…☆752Sep 10, 2026Updated last month
- A in-the-wild V8 type confusion bug.☆32Aug 8, 2025Updated last year