kkent030315 / CVE-2022-42046
CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM
☆162Updated 2 years ago
Alternatives and similar repositories for CVE-2022-42046:
Users that are interested in CVE-2022-42046 are comparing it to the libraries listed below
- Exploitation of process killer drivers☆199Updated last year
- miscellaneous scripts and programs☆239Updated 2 months ago
- This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret …☆246Updated last year
- A PoC implementation for dynamically masking call stacks with timers.☆271Updated 2 years ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆215Updated last year
- Detect strange memory regions and DLLs☆183Updated 3 years ago
- The code is a pingback to the Dark Vortex blog:☆173Updated 2 years ago
- Windows LPE exploit for CVE-2022-37969☆134Updated last year
- ☆135Updated last year
- Exploitation of echo_driver.sys☆169Updated last year
- XOR decrypting shellcode using the GPU with OpenCL.☆96Updated 2 years ago
- different ntdll unhooking techniques : unhooking ntdll from disk, from KnownDlls, from suspended process, from remote server (fileless)☆188Updated last year
- Replace the .txt section of the current loaded modules from \KnownDlls\ to bypass edrs☆295Updated 2 years ago
- Beacon Object File Loader☆286Updated last year
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆192Updated 10 months ago
- ☆256Updated 2 years ago
- Building and Executing Position Independent Shellcode from Object Files in Memory☆156Updated 4 years ago
- WTSRM☆209Updated 2 years ago
- ☆195Updated 4 years ago
- Experiment on reproducing Obfuscate & Sleep☆144Updated 4 years ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆122Updated 2 years ago
- Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap☆239Updated last year
- Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscal…☆309Updated last year
- ETW based POC to identify direct and indirect syscalls☆185Updated last year
- An example reference design for a proposed BOF PE☆158Updated last month
- It's pointy and it hurts!☆125Updated 2 years ago
- Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…☆167Updated last year
- ☆155Updated 2 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆170Updated 2 years ago
- A Poc on blocking Procmon from monitoring network events☆101Updated 2 years ago