AIDA64DRIVER Elevation of Privilege Vulnerability
☆17Oct 25, 2024Updated last year
Alternatives and similar repositories for AIDA64DRIVER-EoP
Users that are interested in AIDA64DRIVER-EoP are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Windows kernel driver exploitation knowledge base — 28 case studies organized by driver type, grounded in real CVEs with build numbers an…☆76Sep 6, 2026Updated 3 weeks ago
- Various techniques used to bypass SMEP in the Windows Kernel.☆19Apr 20, 2025Updated last year
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules☆40May 6, 2023Updated 3 years ago
- using wnbios64.sys for arbitrary r/w☆14Jun 12, 2026Updated 3 months ago
- This repo contains EXPs about Vulnerable Windows Driver☆49May 22, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Jan 7, 2023Updated 3 years ago
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆64Feb 11, 2024Updated 2 years ago
- A C/C++ framework designed to simplify shellcode creation on any compilers and platforms using C. Supports Windows & Linux, and practical…☆28Sep 16, 2024Updated 2 years ago
- TypeLib persistence technique☆152Oct 22, 2024Updated last year
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆66Mar 19, 2024Updated 2 years ago
- Executing Kernel Routines via Syscall Table Hijack (Kernel Code Execution)☆84Jun 7, 2026Updated 3 months ago
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆117Aug 21, 2025Updated last year
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user☆41Aug 15, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆50Jul 29, 2024Updated 2 years ago
- random code snippets, useful for getting started☆124Nov 29, 2025Updated 9 months ago
- This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.☆28Jul 26, 2024Updated 2 years ago
- Exploiting the KsecDD Windows driver through Server Silos☆87Nov 11, 2024Updated last year
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆122Feb 13, 2023Updated 3 years ago
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆204Jun 6, 2024Updated 2 years ago
- A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.☆31Jun 9, 2025Updated last year
- ☆11Feb 6, 2023Updated 3 years ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆285Sep 18, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Listing UDP connections with remote address without sniffing.☆31Sep 26, 2023Updated 3 years ago
- A process injection technique using only thread context manipulation☆43Dec 18, 2023Updated 2 years ago
- Vulnerable (on purpose) programs to leak NtReadVirtualMemory address for stealthier API resolution (no GetProcAddress, GetModuleHandle or…☆42Dec 22, 2025Updated 9 months ago
- Beacon Object File (BOF) Template☆96Mar 9, 2026Updated 6 months ago
- A wrapper around the Proxmark3 client that will alert the user of specific events☆31Dec 13, 2020Updated 5 years ago
- 高性能socks５代理服务 (High-performance socks5 proxy server)☆16Nov 5, 2019Updated 6 years ago
- The SecurityTube Linux Assembly Expert (SLAE) is an online course and certification which focuses on teaching the basics of 32-bit assemb…☆22Mar 31, 2019Updated 7 years ago
- Example code on how to use a custom dll during dll hijack on Narrator.exe as a persistence☆23Oct 27, 2025Updated 11 months ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Plugin for x64dbg that allows you to select block of data in dump widget easier☆22Jul 20, 2021Updated 5 years ago
- Rust Weaponization for Red Team Engagements.☆12Nov 14, 2022Updated 3 years ago
- Remotely Enumerate sessions using undocumented Windows Station APIs☆117Aug 21, 2024Updated 2 years ago
- All my POC related to malware development☆15Aug 4, 2026Updated last month
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆46Oct 11, 2025Updated 11 months ago
- Audiodg.exe DLL hijacking for LPE with reboot-free restart primitive. Executes code as LOCAL SERVICE, escalates to SYSTEM via Scheduled T…☆127Jan 24, 2026Updated 8 months ago
- A Reflective Loader for macOS☆150Jul 20, 2025Updated last year