Alternatives and similar repositories for exploitkitpub

Users that are interested in exploitkitpub are comparing it to the libraries listed below

• VoidSec / ioctlpus
  IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).
  ☆92Updated 3 years ago
• xct / windows-kernel-exploits
  Some of my windows kernel exploits for learning purposes
  ☆129Updated 3 years ago
• jonaslyk / temp
  ☆71Updated 2 years ago
• p0dalirius / pyPDBdownload
  A Python script to download PDB files associated with a Portable Executable (PE)
  ☆122Updated 5 months ago
• riskydissonance / SyscallsExample
  Simple project using syscalls (via Syswhispers2) to execute MessageBox shellcode.
  ☆75Updated 3 years ago
• enkomio / thematrix
  a PE Loader and Windows API tracer. Useful in malware analysis.
  ☆139Updated 2 years ago
• rad9800 / WTSRM2
  ☆161Updated 2 years ago
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆105Updated 2 years ago
• waleedassar / RestrictedKernelLeaks
  ☆162Updated 3 years ago
• floesen / KExecDD
  Admin to Kernel code execution using the KSecDD driver
  ☆251Updated last year
• zodiacon / Recon2023
  Recon 2023 slides and code
  ☆79Updated 2 years ago
• daem0nc0re / SharpWnfSuite
  C# Utilities for Windows Notification Facility
  ☆152Updated 3 months ago
• y11en / FOLIAGE
  Experiment on reproducing Obfuscate & Sleep
  ☆145Updated 4 years ago
• 0x00Jeff / BetterGetProcAddress
  POC of a better implementation of GetProcAddress for ntdll using binary search
  ☆109Updated last year
• alfarom256 / LogMeInPoCHandleDup
  ☆64Updated last year
• ViperXSecurity / lib-nosa
  lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.
  ☆113Updated 10 months ago
• forrest-orr / Exploits
  A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in c…
  ☆121Updated 2 years ago
• xforcered / Windows_MSKSSRV_LPE_CVE-2023-36802
  LPE exploit for CVE-2023-36802
  ☆22Updated last year
• thesecretclub / ArbitraryDirectoryDeletion
  From directory deletion to SYSTEM shell
  ☆111Updated 5 years ago
• yardenshafir / IoRingReadWritePrimitive
  Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2
  ☆229Updated 3 years ago
• enkomio / BrokenFlow
  A simple PoC to invoke an encrypted shellcode by using an hidden call
  ☆116Updated 2 years ago
• SpikySabra / Kernel-Cactus
  It's pointy and it hurts!
  ☆125Updated 2 years ago
• hasherezade / masm_shc
  A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.
  ☆179Updated 2 months ago
• LloydLabs / dearg-thread-ipc-stealth
  A novel technique to communicate between threads using the standard ETHREAD structure
  ☆113Updated 4 years ago
• nccgroup / DetectWindowsCopyOnWriteForAPI
  Enumerate various traits from Windows processes as an aid to threat hunting
  ☆187Updated 3 years ago
• am0nsec / wspe
  Windows System Programming Experiments
  ☆220Updated 3 years ago
• Bw3ll / ROP_ROCKET
  ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Sysc…
  ☆127Updated last week
• DISREL / Ring0VBA
  CVE-2018-6066 using VBA
  ☆65Updated 2 years ago
• alfarom256 / MCP-PoC
  Minifilter Callback Patching Proof-of-Concept
  ☆71Updated 2 years ago
• xalicex / kernel-debug-lab-for-virtual-box
  How to set up 2 VirtualBox VM to debug kernel driver using windbg
  ☆54Updated 3 years ago