sensepost/gdi-palettes-exp external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

sensepost/gdi-palettes-exp

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/sensepost/gdi-palettes-exp)

Close

sensepost / gdi-palettes-expView on GitHubMore

• External links
• Readme badge

DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects

☆146Jul 30, 2017Updated 9 years ago

Alternatives and similar repositories for gdi-palettes-exp

Users that are interested in gdi-palettes-exp are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• leeqwind / HolicPOC

  View on GitHub
  POC and exploitation of vulnerabilities
  ☆90Mar 22, 2022Updated 4 years ago
• cbayet / PoolSprayer

  View on GitHub
  Simple library to spray the Windows Kernel Pool
  ☆111Jan 6, 2020Updated 6 years ago
• progmboy / cansecwest2017

  View on GitHub
  ☆62Apr 13, 2017Updated 9 years ago
• siberas / CVE-2016-3309_Reloaded

  View on GitHub
  Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques
  ☆53Oct 6, 2017Updated 9 years ago
• MortenSchenk / BHUSA2017

  View on GitHub
  Content from presentation at BHUSA 2017
  ☆177Jul 27, 2017Updated 9 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• cbayet / Exploit-CVE-2017-6008

  View on GitHub
  Exploits for CVE-2017-6008, a kernel pool buffer overflow leading to privilege escalation.
  ☆119Nov 6, 2024Updated 2 years ago
• niklasb / elgoog

  View on GitHub
  elgoog/searchme challenge from 34C3 CTF / WCTF 2018: sources & exploit
  ☆67Jul 9, 2018Updated 8 years ago
• synacktiv / Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion

  View on GitHub
  PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap
  ☆213Jul 2, 2020Updated 6 years ago
• yuvatia / Win10GdiExploitation

  View on GitHub
  Exploiting HEVD's WriteWhatWhereIoctlDispatch for LPE on Windows 10 TH2 through RS3 using GDI objects.
  ☆24Jan 23, 2018Updated 8 years ago
• MortenSchenk / tagWnd-Hardening-Bypass

  View on GitHub
  Bypass for the hardening against usage of tagWnd as a kernel read/write primitive
  ☆32Mar 22, 2017Updated 9 years ago
• fishstiqz / poolinfo

  View on GitHub
  kernel pool windbg extension
  ☆82Jul 23, 2015Updated 11 years ago
• bee13oy / AV_Kernel_Vulns

  View on GitHub
  Pocs for Antivirus Software‘s Kernel Vulnerabilities
  ☆264Jul 6, 2017Updated 9 years ago
• RanchoIce / 44Con2018

  View on GitHub
  Slides of 44Con 2018
  ☆23Oct 11, 2018Updated 8 years ago
• helpsystems / GDIObjDump

  View on GitHub
  ☆35Sep 18, 2015Updated 11 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• panoramixor / GDIObjDump

  View on GitHub
  ☆29Sep 18, 2015Updated 11 years ago
• sensepost / ms16-098

  View on GitHub
  Windows 8.1 x64 Exploit for MS16-098 RNGOBJ_Integer_Overflow
  ☆92Apr 20, 2017Updated 9 years ago
• Rootkitsmm-zz / Win32k-Fuzzer

  View on GitHub
  Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
  ☆137Nov 28, 2015Updated 10 years ago
• sam-b / windows_kernel_address_leaks

  View on GitHub
  Examples of leaking Kernel Mode information from User Mode on Windows
  ☆646Jul 7, 2017Updated 9 years ago
• MortenSchenk / RtlCaptureContext-CFG-Bypass

  View on GitHub
  Internet Explorer Exploit with CFG bypass for Windows 10
  ☆59Jan 11, 2017Updated 9 years ago
• gdabah / win32k-bugs

  View on GitHub
  Dump of win32k POCs for bugs I've found
  ☆381Mar 6, 2022Updated 4 years ago
• vp777 / Windows-Kernel-Exploitation

  View on GitHub
  Techniques/tools on Windows kernel exploitation
  ☆272Sep 1, 2026Updated 2 months ago
• freeide / CVE-2021-31955-POC

  View on GitHub
  ☆12Jun 26, 2021Updated 5 years ago
• james0x40 / CVE-2020-0624

  View on GitHub
  win32k use-after-free poc
  ☆70Apr 22, 2020Updated 6 years ago
• AI Agents on DigitalOcean Gradient AI Platform • Ad
  Build production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
• sam-b / windows_kernel_resources

  View on GitHub
  Papers, blogposts, tutorials etc for learning about Windows kernel exploitation, internals and (r|b)ootkits
  ☆422Jan 2, 2020Updated 6 years ago
• FSecureLABS / win_driver_plugin

  View on GitHub
  A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.
  ☆440Aug 22, 2018Updated 8 years ago
• sam-b / windbg-plugins

  View on GitHub
  Any useful windbg plugins I've written.
  ☆117Apr 10, 2018Updated 8 years ago
• IOActive / I-know-where-your-page-lives

  View on GitHub
  I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016
  ☆176Dec 7, 2016Updated 9 years ago
• MortenSchenk / Bypassing_CFG_SEH

  View on GitHub
  Using SEH to bypass CFG
  ☆28Mar 28, 2017Updated 9 years ago
• k0keoyo / SegmentHeapExt

  View on GitHub
  ☆41Jul 9, 2020Updated 6 years ago
• theori-io / jscript9-typedarray

  View on GitHub
  Proof-of-Concept exploit for jscript9 bug (MS16-063)
  ☆49Jun 27, 2016Updated 10 years ago
• sam-b / CVE-2014-4113

  View on GitHub
  Trigger and exploit code for CVE-2014-4113
  ☆41Feb 14, 2016Updated 10 years ago
• bluefrostsecurity / CVE-2019-1215

  View on GitHub
  ☆149Jan 7, 2020Updated 6 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• 1111joe1111 / ida_ea

  View on GitHub
  A set of exploitation/reversing aids for IDA
  ☆421Nov 28, 2017Updated 8 years ago
• JeremyFetiveau / Exploits

  View on GitHub
  Old exploits and code for my self-referencing PML4 technique (2014)
  ☆31May 8, 2015Updated 11 years ago
• CENSUS / windows_10_rs2_rs3_exploitation_primitives

  View on GitHub
  Windows 10 RS2/RS3 exploitation primitives based on the OffensiveCon 2018 talk
  ☆59Feb 27, 2018Updated 8 years ago
• homjxi0e / PoC-ActiveX

  View on GitHub
  PoC ActiveX SVG Document Execution
  ☆18Nov 8, 2018Updated 7 years ago
• k0keoyo / my_vulnerabilities

  View on GitHub
  ☆130Aug 23, 2022Updated 4 years ago
• progmboy / kernel_vul_poc

  View on GitHub
  ☆30Jan 4, 2018Updated 8 years ago
• saaramar / execve_exploit

  View on GitHub
  Hardcore corruption of my execve() vulnerability in WSL
  ☆221Feb 2, 2018Updated 8 years ago