hackerhouse-opensource / Gigabyte_ElevatePersistLinks
Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming and performance PC's. A UAC elevation vulnerability exists that can be used for persistence in a novel fashion.
☆33Updated 2 years ago
Alternatives and similar repositories for Gigabyte_ElevatePersist
Users that are interested in Gigabyte_ElevatePersist are comparing it to the libraries listed below
Sorting:
- ☆56Updated 2 years ago
- A method to execute shellcode using RegisterWaitForInputIdle API.☆55Updated 2 years ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆33Updated 2 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆57Updated 3 years ago
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆13Updated 2 years ago
- A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously☆31Updated 2 years ago
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆39Updated 2 years ago
- ☆31Updated 2 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Updated 3 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year
- Persistence via Shell Extensions☆62Updated 2 years ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Updated 2 years ago
- ☆18Updated last year
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆23Updated 2 years ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆44Updated last year
- A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation☆37Updated 5 months ago
- Your NTDLL vaccine from modern direct syscall methods.☆36Updated 3 years ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Updated last year
- Unpacker for donut shellcode☆17Updated 5 years ago
- ☆12Updated last year
- Find kernel32 base and API addresses. Simple C++ implementation☆24Updated 3 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆28Updated 4 years ago
- idk man this was the default github name☆35Updated 2 years ago
- Eset-Unload is a C++ tool that interacts with a process's loaded modules to identify and unload the ebehmoni.dll module, typically found …☆12Updated 6 months ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Updated 5 years ago
- ☆24Updated last year
- Aggressor script to automatically download and load an arsenal of open source and private Cobalt Strike tooling.☆43Updated last year
- Golang Implementation of Hell's gate☆19Updated 2 years ago
- ☆42Updated 2 years ago