thiagopeixoto / winsos-pocLinks
A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.
☆112Updated last year
Alternatives and similar repositories for winsos-poc
Users that are interested in winsos-poc are comparing it to the libraries listed below
Sorting:
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆86Updated 2 years ago
- ☆61Updated last year
- Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar☆130Updated 11 months ago
- I have documented all of the AMSI patches that I learned till now☆73Updated 3 months ago
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Updated 6 months ago
- A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.☆74Updated 2 months ago
- Create Anti-Copy DRM Malware☆59Updated 11 months ago
- ☆66Updated 5 months ago
- Template-based generation of shellcode loaders☆78Updated last year
- ☆86Updated 10 months ago
- ☆100Updated last year
- ☆143Updated 8 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆82Updated 9 months ago
- Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)☆72Updated 9 months ago
- ☆78Updated last year
- Identify and exploit leaked handles for local privilege escalation.☆109Updated 2 years ago
- Construct the payload at runtime using an array of offsets☆63Updated last year
- Linker for Beacon Object Files☆121Updated this week
- Splitting and executing shellcode across multiple pages☆102Updated 2 years ago
- Find DLLs with RWX section☆81Updated 2 years ago
- XOR decrypting shellcode using the GPU with OpenCL.☆100Updated last month
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆90Updated last year
- shell code example☆57Updated 2 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆75Updated 11 months ago
- TypeLib persistence technique☆118Updated 8 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆53Updated 2 months ago
- A set of rootkit-like abilities for unprivileged users, and vulnerabilities based on the DOT-to-NT path conversion known issue☆100Updated last year
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆64Updated 2 years ago
- Implementation of Indirect Syscall technique to pop a calc.exe☆102Updated last year
- Remotely Enumerate sessions using undocumented Windows Station APIs☆116Updated 10 months ago