A full-fledged RtlVectoredExceptionHandler code written from scratch.
☆18Oct 21, 2024Updated 2 years ago
Alternatives and similar repositories for Exception-Junction
Users that are interested in Exception-Junction are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated 2 years ago
- A runtime for developing large-scale and complex PIC module.☆20Sep 15, 2026Updated last month
- ☆16Sep 25, 2024Updated 2 years ago
- ☆22Aug 14, 2026Updated 2 months ago
- Whitepaper☆16Dec 1, 2025Updated 10 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated 2 years ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆45Jun 14, 2026Updated 4 months ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- An advanced attribution deception tool that adds subtle, region-specific fingerprints to command-line operations to mislead forensic anal…☆21Mar 1, 2025Updated last year
- Windows Kernel Http Library☆18Mar 9, 2026Updated 7 months ago
- Tool for playing with Windows Access Token manipulation.☆83Nov 28, 2022Updated 3 years ago
- crEAP - Python script to identify wireless networks EAP types and harvest users☆14Oct 17, 2023Updated 3 years ago
- Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…☆88Nov 6, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆37May 19, 2026Updated 5 months ago
- Process Injection: APC Injection☆36Jan 13, 2021Updated 5 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 2 months ago
- A Mythic Agent written in PIC C.☆213Feb 4, 2025Updated last year
- Kernel Information Disclosure☆35Jan 13, 2026Updated 9 months ago
- ☆150Nov 6, 2025Updated 11 months ago
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆32Jan 30, 2025Updated last year
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- .NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on dis…☆41Oct 11, 2026Updated 2 weeks ago
- An advanced utility for converting Windows Portable Executable (PE) files to position-independent code (PIC) shellcode. It enables execut…☆66Mar 1, 2025Updated last year
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆75Jul 14, 2026Updated 3 months ago
- A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a cr…☆26Apr 11, 2026Updated 6 months ago
- Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)☆266Jun 29, 2024Updated 2 years ago
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆47Oct 11, 2025Updated last year
- ☆164Jul 31, 2022Updated 4 years ago
- Beacon Object File to Enable Chrome DevTools Protocol (CDP)☆133Oct 17, 2026Updated last week
- ☆99Sep 1, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- BOF with Synthetic Stackframe☆274Oct 30, 2025Updated 11 months ago
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- ☆13May 24, 2024Updated 2 years ago
- This repo contains code of JScript .NET which can be used as alternative to csc.exe to run potentially malicious code, which ships in all…☆12Nov 8, 2019Updated 6 years ago
- AngrPT recover the Windows Driver's DeviceIoControl Interface and Dependencies for getting higher coverage in Fuzzing Process.☆22Jan 20, 2026Updated 9 months ago
- A x64 Position Independent Proxy Enumerator Shellcode (PIPES)☆27Nov 14, 2025Updated 11 months ago