AIDA64DRIVER Elevation of Privilege Vulnerability
☆17Oct 25, 2024Updated 2 years ago
Alternatives and similar repositories for AIDA64DRIVER-EoP
Users that are interested in AIDA64DRIVER-EoP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This driver hooks a device object for ioctl and uses mdls to allocate physical pages and manually injects an entry into a process's page …☆16Feb 14, 2023Updated 3 years ago
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules☆41May 6, 2023Updated 3 years ago
- A C/C++ framework designed to simplify shellcode creation on any compilers and platforms using C. Supports Windows & Linux, and practical…☆28Sep 16, 2024Updated 2 years ago
- using wnbios64.sys for arbitrary r/w☆14Jun 12, 2026Updated 4 months ago
- Repository of different kernel drivers written while studying Windows NT Driver development☆13Apr 14, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Jan 7, 2023Updated 3 years ago
- ☆23Jan 15, 2025Updated last year
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆66Feb 11, 2024Updated 2 years ago
- This repo contains EXPs about Vulnerable Windows Driver☆46May 22, 2024Updated 2 years ago
- Various techniques used to bypass SMEP in the Windows Kernel.☆21Apr 20, 2025Updated last year
- Remap ntdll.dll using only NTAPI functions with a suspended process☆29Apr 13, 2025Updated last year
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆26Mar 4, 2026Updated 8 months ago
- Beacon Object File (BOF) Template☆100Oct 14, 2026Updated 3 weeks ago
- A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user☆41Aug 15, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆205Jun 6, 2024Updated 2 years ago
- Using LNK files and user input simulation to start processes under explorer.exe☆34Sep 21, 2024Updated 2 years ago
- CVE-2021-34527 AddPrinterDriverEx() Privilege Escalation☆23Feb 2, 2026Updated 9 months ago
- A kernel driver to get a Handle to virtually *every* process☆15Jan 16, 2024Updated 2 years ago
- Persistence via Shell Extensions☆63Aug 4, 2023Updated 3 years ago
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- TypeLib persistence technique☆151Oct 22, 2024Updated 2 years ago
- A set of programs for analyzing common vulnerabilities in COM☆266Sep 8, 2024Updated 2 years ago
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆120Aug 21, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆124Feb 13, 2023Updated 3 years ago
- random code snippets, useful for getting started☆127Nov 29, 2025Updated 11 months ago
- Vulnerable driver research tool, result and exploit PoCs☆242Nov 1, 2023Updated 3 years ago
- In-memory hiding technique☆66Jan 5, 2025Updated last year
- Windows Clipboard Monitor☆11Apr 2, 2013Updated 13 years ago
- Exploits written while preparing for the OSED exam☆29Apr 30, 2024Updated 2 years ago
- Executing Kernel Routines via Syscall Table Hijack (Kernel Code Execution)☆86Jun 7, 2026Updated 4 months ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- ☆113Feb 17, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A wrapper around the Proxmark3 client that will alert the user of specific events☆31Dec 13, 2020Updated 5 years ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆67Mar 19, 2024Updated 2 years ago
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆27Jul 26, 2024Updated 2 years ago
- Example code on how to use a custom dll during dll hijack on Narrator.exe as a persistence☆24Oct 27, 2025Updated last year
- ☆11Feb 6, 2023Updated 3 years ago
- 高性能socks５代理服务 (High-performance socks5 proxy server)☆16Nov 5, 2019Updated 7 years ago
- Allows you to find the use of ScyllaHide, if your program will debug and restore hooking functions bytes.☆29Aug 3, 2019Updated 7 years ago