A full-fledged RtlVectoredExceptionHandler code written from scratch.
☆18Oct 21, 2024Updated last year
Alternatives and similar repositories for Exception-Junction
Users that are interested in Exception-Junction are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated last year
- ☆23May 19, 2026Updated 2 months ago
- A runtime for developing large-scale and complex shellcode.☆21Updated this week
- Whitepaper☆15Dec 1, 2025Updated 7 months ago
- Tool for playing with Windows Access Token manipulation.☆84Nov 28, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An example of Windows self-replicating malware.☆13Jan 16, 2023Updated 3 years ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆45Jul 12, 2026Updated last week
- Next Generation of DripLoader with Indirect Syscalls and .node Side-loading☆31Nov 17, 2025Updated 8 months ago
- An advanced attribution deception tool that adds subtle, region-specific fingerprints to command-line operations to mislead forensic anal…☆20Mar 1, 2025Updated last year
- Dynamically invoke arbitrary code in Rust☆104Mar 16, 2026Updated 4 months ago
- shadow tls client☆15Dec 30, 2022Updated 3 years ago
- Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…☆87Nov 6, 2025Updated 8 months ago
- ☆20Apr 17, 2026Updated 3 months ago
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆13Jul 14, 2022Updated 4 years ago
- BOF with Synthetic Stackframe☆257Oct 30, 2025Updated 8 months ago
- Kernel Information Disclosure☆35Jan 13, 2026Updated 6 months ago
- An advanced utility for converting Windows Portable Executable (PE) files to position-independent code (PIC) shellcode. It enables execut…☆66Mar 1, 2025Updated last year
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆87Jun 20, 2026Updated last month
- ☆118Aug 7, 2022Updated 3 years ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆98Apr 30, 2026Updated 2 months ago
- Position-independent Reflective Loader for macOS☆131Feb 19, 2026Updated 5 months ago
- ☆58Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆163Jul 31, 2022Updated 3 years ago
- A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a cr…☆25Apr 11, 2026Updated 3 months ago
- early cascade injection PoC based on Outflanks blog post☆241Nov 7, 2024Updated last year
- ☆23Jan 15, 2025Updated last year
- Remote PE reflective injection with a simple reflective loader☆33Jun 28, 2019Updated 7 years ago
- Bring your own Unwind Data Framework☆158Mar 15, 2026Updated 4 months ago
- A Beacon Object File (BOF) template for Visual Studio☆286Jun 11, 2026Updated last month
- ☆73Dec 19, 2024Updated last year
- Scanning tool for identifying local privilege escalation issues in vulnerable MSI installers☆127Sep 12, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A x64 Position Independent Proxy Enumerator Shellcode (PIPES)☆27Nov 14, 2025Updated 8 months ago
- AngrPT recover the Windows Driver's DeviceIoControl Interface and Dependencies for getting higher coverage in Fuzzing Process.☆22Jan 20, 2026Updated 6 months ago
- Reflective DLL self-loading as a library☆21May 3, 2025Updated last year
- Memory API proxy via signed mozglue.dll☆40Jun 25, 2026Updated 3 weeks ago
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- Apply a filter to the events being reported by windows event logging☆15Sep 10, 2020Updated 5 years ago
- Execute an arbitrary command within the context of another process☆21Jun 28, 2019Updated 7 years ago