hackerhouse-opensource / Gigabyte_ElevatePersistLinks
Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming and performance PC's. A UAC elevation vulnerability exists that can be used for persistence in a novel fashion.
☆31Updated 2 years ago
Alternatives and similar repositories for Gigabyte_ElevatePersist
Users that are interested in Gigabyte_ElevatePersist are comparing it to the libraries listed below
Sorting:
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆33Updated 2 years ago
- A method to execute shellcode using RegisterWaitForInputIdle API.☆55Updated 2 years ago
- ☆30Updated 2 years ago
- ☆54Updated 2 years ago
- ☆18Updated 10 months ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆38Updated 2 years ago
- A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation☆37Updated 3 months ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Updated 3 years ago
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆12Updated 2 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆56Updated 2 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆33Updated last year
- ADSI based SA tool☆17Updated 3 years ago
- A bunch of shenanigans using functions, VEH and more☆32Updated 2 months ago
- ☆12Updated last year
- A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously☆31Updated 2 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆23Updated last year
- ☆19Updated 2 years ago
- Remap ntdll.dll using only NTAPI functions with a suspended process☆22Updated 4 months ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 3 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆28Updated 3 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆31Updated last year
- ☆43Updated last year
- ☆15Updated 3 years ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆43Updated last year
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Updated 2 years ago
- all credits go to @mgeeky☆64Updated 3 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- Find kernel32 base and API addresses. Simple C++ implementation☆24Updated 3 years ago
- Extension functionality for the NightHawk operator client☆27Updated last year