Rust-based Windows kernel driver research project with a companion user-mode client for IOCTL-based experiments with process, token, PPL, and callback internals. Designed for authorized lab testing and Windows driver development study.
☆17Apr 30, 2026Updated 3 months ago
Alternatives and similar repositories for Haschwalth
Users that are interested in Haschwalth are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Misery Loader to bypass modern EDR solutions☆15Dec 20, 2024Updated last year
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated last month
- Collection of Win32 with C++/Assembly for Hooking, Patch and Reversing PE file☆18Nov 7, 2022Updated 3 years ago
- Janus analyzes C2 telemetry to surface failure patterns, operator friction, and automation opportunities across engagements.☆58Jun 23, 2026Updated 2 months ago
- Find Windows RWX Memory Regions depending on the memory space needed☆17Nov 26, 2023Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆16Jul 30, 2026Updated 3 weeks ago
- POCs to demonstrate CVE-2026-42167 in ProFTPD☆24Apr 29, 2026Updated 3 months ago
- C++ Code to perform a MiniDump of lsass.exe☆36Aug 2, 2023Updated 3 years ago
- Beacon Object File for LDAP Queries Through ADWS☆37Jun 12, 2026Updated 2 months ago
- Step through PE functions or shellcode instruction-by-instruction (amd64)☆42May 4, 2026Updated 3 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 6 months ago
- Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11☆84Jan 26, 2026Updated 6 months ago
- Remote Code Execution via Insecure Deserialization in Wazuh Cluster☆40Mar 17, 2026Updated 5 months ago
- Okta Data Collector for BloodHound Community☆16Apr 21, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- abusing windows toast notifications for fun and user manipulation☆104Jul 11, 2026Updated last month
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 6 months ago
- tower of fantasy anti-cheat driver exploit research☆20Mar 17, 2026Updated 5 months ago
- Performs a global AMSI bypass by patching amsi.dll in memory.☆20Oct 14, 2025Updated 10 months ago
- Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise — WAV steganography, credential stealer, Windows persi…☆21Mar 29, 2026Updated 4 months ago
- An Ansible collection that installs a SCOM deployment with optional configurations.☆24Dec 9, 2025Updated 8 months ago
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆24Mar 4, 2026Updated 5 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated last month
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆157Mar 8, 2026Updated 5 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A BYOVD technique abuse tool☆22Jul 21, 2026Updated last month
- Notion C2 Profile for Mythic☆48Apr 30, 2026Updated 3 months ago
- Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules…☆48Jul 30, 2026Updated 3 weeks ago
- Automated (kinda) deployment of MalRDP infrastructure with Terraform & Ansible☆12Sep 15, 2023Updated 2 years ago
- ☆16Jan 9, 2025Updated last year
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆51Feb 4, 2026Updated 6 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 6 months ago
- Simple C++ Reverse Shell☆13Nov 22, 2022Updated 3 years ago
- ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.☆33Apr 12, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest clea…☆45Mar 27, 2026Updated 4 months ago
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆57Mar 22, 2026Updated 5 months ago
- AdminX it's a Malware to execute process as some users from a Windows OS☆11May 4, 2023Updated 3 years ago
- A pointer encryption library intended for Red Team implant design in Rust.☆67Oct 1, 2025Updated 10 months ago
- C++ keylogger to save all the keys pressed into a local txt file☆11Apr 6, 2023Updated 3 years ago
- ☆19Dec 18, 2024Updated last year
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆55Mar 30, 2026Updated 4 months ago