Autonomous Windows POC developer from patchwatch diff reports
☆160Jul 30, 2026Updated 3 months ago
Alternatives and similar repositories for pocsmith
Users that are interested in pocsmith are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analys…☆83Jul 31, 2026Updated 3 months ago
- An MCP server wrapping `kd.exe` for Windows kernel debugging☆18May 13, 2026Updated 5 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆324Jun 28, 2026Updated 4 months ago
- Set of PoC to abuse Windows minifilters functionality☆113May 1, 2026Updated 6 months ago
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆83Sep 18, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆69Sep 21, 2026Updated last month
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆57Mar 30, 2026Updated 7 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 7 months ago
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆136Mar 27, 2026Updated 7 months ago
- Linux UEFI bootkit and rootkit framework written in Rust☆190Updated this week
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆76Jul 14, 2026Updated 3 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆41Oct 14, 2026Updated 3 weeks ago
- ☆24Sep 12, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Fairy Law - Compromise or disable EDR security solutions☆80Dec 1, 2025Updated 11 months ago
- MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credent…☆19Oct 24, 2026Updated 2 weeks ago
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆30Aug 4, 2026Updated 3 months ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆155Aug 18, 2026Updated 2 months ago
- Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By…☆167Nov 23, 2025Updated 11 months ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆118Jul 14, 2026Updated 3 months ago
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 10 months ago
- ☆23Jan 15, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A Payload Analysis Framework☆124Oct 9, 2025Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.☆210Jun 25, 2026Updated 4 months ago
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆185Apr 14, 2026Updated 6 months ago
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 3 months ago
- ☆53Oct 4, 2026Updated last month
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆247Jul 8, 2026Updated 4 months ago
- Windows protocol library, including SMB and RPC implementations, among others.☆846Oct 5, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Gain insights into MS-RPC implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By f…☆353May 4, 2026Updated 6 months ago
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 4 months ago
- ☆37Sep 22, 2026Updated last month
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆308Sep 23, 2025Updated last year
- Bring your own Unwind Data Framework☆180Mar 15, 2026Updated 7 months ago
- Analyse your malware to surgically obfuscate it☆551Jun 27, 2026Updated 4 months ago
- Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths☆366Aug 11, 2024Updated 2 years ago
Are these results useful?