Autonomous Windows POC developer from patchwatch diff reports
☆161Jul 30, 2026Updated 2 months ago
Alternatives and similar repositories for pocsmith
Users that are interested in pocsmith are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A local tool for ingesting Windows Patch Tuesday CVEs, diffing patched binaries with Ghidriff and surfacing LLM-generated security analys…☆83Jul 31, 2026Updated 2 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆316Jun 28, 2026Updated 3 months ago
- An MCP server wrapping `kd.exe` for Windows kernel debugging☆17May 13, 2026Updated 5 months ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆66Sep 21, 2026Updated last month
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Set of PoC to abuse Windows minifilters functionality☆112May 1, 2026Updated 5 months ago
- ☆24Sep 12, 2026Updated last month
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆153Aug 18, 2026Updated 2 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆73Jul 14, 2026Updated 3 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆25Oct 14, 2026Updated last week
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆80Sep 18, 2026Updated last month
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 6 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆56Sep 15, 2026Updated last month
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself.…☆164Oct 6, 2026Updated 2 weeks ago
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 2 months ago
- ☆38Sep 8, 2026Updated last month
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆116Jul 14, 2026Updated 3 months ago
- ☆37Sep 22, 2026Updated last month
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- Fairy Law - Compromise or disable EDR security solutions☆80Dec 1, 2025Updated 10 months ago
- IP obfuscation and URL generator.☆47Dec 8, 2025Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆107Oct 1, 2026Updated 3 weeks ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆258Sep 29, 2026Updated 3 weeks ago
- ☆49Oct 4, 2026Updated 2 weeks ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- Claude Code skill for systematically reducing VirusTotal/EDR detection rates on compiled Go binaries via PE structural analysis and disci…☆20Jun 24, 2026Updated 3 months ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆308Sep 23, 2025Updated last year
- DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.☆210Jun 25, 2026Updated 3 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆88Jul 20, 2026Updated 3 months ago
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆185Apr 14, 2026Updated 6 months ago
- How Windows kernel exploits work, and which defenses still stop them: 157 dissected CVE case studies, dated bypass verdicts per build and …☆79Oct 2, 2026Updated 2 weeks ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆37Updated this week
- Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths☆366Aug 11, 2024Updated 2 years ago
- Malware as a Service Ludus Range☆134Sep 24, 2026Updated 3 weeks ago