How Windows kernel exploits work, and which defenses still stop them: 157 dissected CVE case studies, dated bypass verdicts per build and CPU.
☆79Oct 2, 2026Updated 3 weeks ago
Alternatives and similar repositories for KernelSight
Users that are interested in KernelSight are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆66Sep 21, 2026Updated last month
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆75Oct 10, 2026Updated last week
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆316Jun 28, 2026Updated 3 months ago
- A foundational C library for building operationally credible offensive capabilities☆94Sep 21, 2026Updated last month
- Autonomous Windows POC developer from patchwatch diff reports☆161Jul 30, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆38Sep 8, 2026Updated last month
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆25Oct 14, 2026Updated last week
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆37Oct 1, 2026Updated 3 weeks ago
- study https://github.com/n132/Libc-GOT-Hijacking☆15Dec 7, 2023Updated 2 years ago
- AWS S3 User-Defined C2☆25Oct 6, 2026Updated 2 weeks ago
- Hidden Desktop Plugin For Havoc C2,Soon coming for Sliver.☆258Sep 29, 2026Updated 3 weeks ago
- Windows named pipe hooking toolkit☆46Mar 20, 2026Updated 7 months ago
- Mythic C2 MSTeams Communication Channel☆38Sep 13, 2026Updated last month
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 2 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆107Oct 1, 2026Updated 3 weeks ago
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated 2 weeks ago
- Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reacha…☆67Feb 26, 2026Updated 7 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆64Sep 11, 2026Updated last month
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- ☆46Oct 14, 2026Updated last week
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated 2 months ago
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in…☆198Jun 25, 2026Updated 3 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Static analysis of Ironshield anti-cheat☆83Sep 23, 2026Updated last month
- CVE-85884 POC☆35Oct 13, 2026Updated last week
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated 3 weeks ago
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆19Oct 15, 2026Updated last week
- A canvas for red team infrastructure and cyber ranges. Compose a topology, export runnable Terraform and Ansible, and deploy it yourself.…☆164Oct 6, 2026Updated 2 weeks ago
- AIDA64DRIVER Elevation of Privilege Vulnerability☆17Oct 25, 2024Updated last year
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆71Jul 12, 2026Updated 3 months ago
- SaaS based enumeration based on DNS TXT records☆16Apr 10, 2026Updated 6 months ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆14Jul 17, 2026Updated 3 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated last month
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆241Jul 8, 2026Updated 3 months ago
- Security-first AI-native C5 teamserver (Command · Control · Cognitive · Collaborative · Coordination) for authorized red team & pentest. …☆57Sep 25, 2026Updated 3 weeks ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆73Jul 14, 2026Updated 3 months ago
- LID — Linux Integrity Drift: Bypassing AppArmor via eBPF pathname rewriting. Pre-LSM syscall argument manipulation with zero audit footpr…☆20May 25, 2026Updated 4 months ago
- ☆29Jan 10, 2024Updated 2 years ago