Alternatives and similar repositories for CVE-2025-24990_POC

Users that are interested in CVE-2025-24990_POC are comparing it to the libraries listed below

• cainiao1992 / ollvm-mingw
  An Obfuscator-LLVM based mingw-w64 toolchain.
  ☆46Updated 4 years ago
• MahmoudZohdy / APICallProxy
  Windows API Call Obfuscation
  ☆112Updated 3 years ago
• Nero22k / cve-2023-29360
  Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver
  ☆151Updated 2 years ago
• hid3rx / GhostWriting
  ☆33Updated 2 years ago
• Crypt0s / Ekko_CFG_Bypass
  A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process
  ☆113Updated 3 years ago
• kyxiaxiang / TcpNsiKill
  Simulate per-process disconnection in red team environments
  ☆113Updated 7 months ago
• killvxk / awesome_shell_loaders
  shellcode-loaders and beacon-loaders
  ☆72Updated 2 years ago
• evilashz / PigSyscall
  An implementation of an indirect system call
  ☆131Updated 2 years ago
• wudun7 / obj2shellcode
  shellcode生成框架
  ☆89Updated last year
• capt-meelo / NtCreateUserProcess
  Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html
  ☆143Updated 3 years ago
• MahmoudZohdy / IAT-Obfuscation
  IAT-Obfuscation to make static analysis of executable harder.
  ☆44Updated 4 years ago
• alfarom256 / HPHardwareDiagnostics-PoC
  PoC exploit for HP Hardware Diagnostic's EtdSupp driver
  ☆49Updated 2 years ago
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆80Updated 4 years ago
• jdu2600 / EtwTi-FluctuationMonitor
  Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections
  ☆157Updated 2 years ago
• Hagrid29 / BYOVDKit
  bring your own vulnerable driver
  ☆113Updated 2 years ago
• wesmar / KernelResearchKit
  Windows 11 kernel research framework demonstrating DSE bypass on Windows 11 25H2 through boot-time execution. Loads unsigned drivers by s…
  ☆61Updated 2 weeks ago
• BeneficialCode / KPPL
  Kill Protected Process Light Process (include av)
  ☆58Updated 2 years ago
• dlima04 / thread-pool-injection
  PoC for thread pool based process injection in Windows.
  ☆120Updated 9 months ago
• trickster0 / LdrLoadDll-Unhooking
  LdrLoadDll Unhooking
  ☆135Updated 3 years ago
• 0xlane / com-process-inject
  Process Injection via Component Object Model (COM) IRundown::DoCallback().
  ☆63Updated 2 years ago
• klezVirus / ThreadPoolExecChain
  A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack
  ☆91Updated 2 weeks ago
• oldboy21 / SWAPPALA
  In-memory hiding technique
  ☆63Updated last year
• SaadAhla / StackCrypt
  Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…
  ☆165Updated 2 years ago
• CheckPointSW / VectoredOverloading
  ☆101Updated 3 weeks ago
• aplyc1a / PEMemoryLoader
  Load static-compiled PE from remote server.
  ☆68Updated 3 years ago
• wwh1004 / AmsiBypassUacDetector
  Detect BypassUAC using AMSI
  ☆29Updated 10 months ago
• eversinc33 / GpuDecryptShellcode
  XOR decrypting shellcode using the GPU with OpenCL.
  ☆118Updated 7 months ago
• alfarom256 / MCP-PoC
  Minifilter Callback Patching Proof-of-Concept
  ☆73Updated 3 years ago
• R41N3RZUF477 / RequestTrace_UAC_Bypass
  UAC Bypass using RequestTrace scheduled task
  ☆23Updated 9 months ago
• 0xedh / DEFCON33-KillChainReloaded
  ☆74Updated 5 months ago