Reimplementation of the KExecDD DSE bypass technique.
☆62Sep 7, 2024Updated 2 years ago
Alternatives and similar repositories for Dsebler
Users that are interested in Dsebler are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Basic interactive Windows kernel offensive toolkit written in C☆139Sep 20, 2025Updated last year
- Admin to Kernel code execution using the KSecDD driver☆274Apr 19, 2024Updated 2 years ago
- Reproducing the SkeletonKey malware.☆12Apr 6, 2024Updated 2 years ago
- Offensive Assembly code snippets.☆15Jul 12, 2023Updated 3 years ago
- Patches DSE by swapping both data ptrs located in SeValidateImageHeader && SeValidateImageData☆26Feb 9, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆62May 31, 2024Updated 2 years ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆18May 28, 2024Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆192Nov 27, 2024Updated last year
- ☆58Feb 16, 2025Updated last year
- My implementation of Halo's Gate technique in C#☆51Apr 20, 2022Updated 4 years ago
- In-memory hiding technique☆66Jan 5, 2025Updated last year
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆27Sep 15, 2023Updated 3 years ago
- A repository with UEFI research stuff☆18Jun 23, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆113Jan 17, 2024Updated 2 years ago
- (WIP) A Recursive UDRL leveraging smelly_vx's Feverdream trick.☆18Sep 3, 2025Updated last year
- A set of programs for analyzing common vulnerabilities in COM☆266Sep 8, 2024Updated 2 years ago
- A BOF to enumerate system process, their protection levels, and more.☆125Nov 27, 2024Updated last year
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- ☆132Jan 23, 2025Updated last year
- Poshito is a Windows C2 over Telegram☆20Oct 30, 2024Updated 2 years ago
- FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…☆48Apr 6, 2025Updated last year
- Halos Gate-based NTAPI Unhooker☆50Apr 21, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Impersonate Tokens using only NTAPI functions☆85Apr 4, 2025Updated last year
- Abusing Azure services over C2☆384Jan 20, 2026Updated 9 months ago
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆66Feb 11, 2024Updated 2 years ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆427Oct 24, 2026Updated last week
- Recursive and arbitrary code execution at kernel-level without a system thread creation☆159Mar 16, 2026Updated 7 months ago
- Lateral Movement via the .NET Profiler☆99Nov 21, 2024Updated last year
- These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be…☆23Aug 26, 2023Updated 3 years ago
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆143Jan 17, 2026Updated 9 months ago
- page table manipulation to gain physical r/w☆44Jun 12, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…☆136Mar 16, 2026Updated 7 months ago
- List the ETW provider(s) in the registration table of a process.☆82Sep 20, 2023Updated 3 years ago
- A basic C2 framework written in C☆61Jul 7, 2024Updated 2 years ago
- Remotely Enumerate sessions using undocumented Windows Station APIs☆116Aug 21, 2024Updated 2 years ago
- Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver☆110Oct 26, 2023Updated 3 years ago
- Process Injection using Thread Name☆309Apr 18, 2025Updated last year
- DSE & PG bypass via BYOVD attack☆83Jul 12, 2025Updated last year