HackSysExtremeVulnerableDriver exploits for latest Windows 10 version
☆25Jan 13, 2026Updated 9 months ago
Alternatives and similar repositories for HEVD
Users that are interested in HEVD are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆12Aug 31, 2026Updated 2 months ago
- Techniques/tools on Windows kernel exploitation☆272Sep 1, 2026Updated 2 months ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- CVE-2021-36955☆13Aug 15, 2023Updated 3 years ago
- LPE of CVE-2024-26230☆23Sep 1, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆41Jul 9, 2020Updated 6 years ago
- Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation☆130Mar 22, 2024Updated 2 years ago
- Slide of my conference presentations☆15Sep 5, 2024Updated 2 years ago
- CVE-2022-24494☆13May 27, 2022Updated 4 years ago
- ☆146Mar 29, 2025Updated last year
- POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY☆232Apr 12, 2025Updated last year
- Analysis of the vulnerability☆51Jan 23, 2024Updated 2 years ago
- An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.☆156Mar 2, 2023Updated 3 years ago
- PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap☆213Jul 2, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Heappo 🦛 is a PyKD based extensions for WinDBG which aids Heap Exploitation☆14Mar 25, 2020Updated 6 years ago
- kernel pool windbg extension☆82Jul 23, 2015Updated 11 years ago
- Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability☆10Mar 18, 2021Updated 5 years ago
- HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion☆69Apr 22, 2025Updated last year
- Reports and POCs for CVE 2024-43570 and CVE-2024-43535☆31Jun 7, 2025Updated last year
- Former Multi - Ring to Kernel To UserMode Transitional Shellcode For Remote Kernel Exploits☆31Jun 14, 2022Updated 4 years ago
- For V8CTF M123☆18Aug 25, 2024Updated 2 years ago
- REcon 2024 Repo, slides for talk "GOP Complex: Image parsing bugs, EBC polymorphic engines and the Deus ex machina of UEFI exploit dev""☆14Mar 31, 2025Updated last year
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆260Jul 5, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Security research helper for CLFS drivers☆16Sep 5, 2024Updated 2 years ago
- Minifilter Callback Patching Proof-of-Concept☆78Oct 31, 2022Updated 4 years ago
- Simple library to spray the Windows Kernel Pool☆111Jan 6, 2020Updated 6 years ago
- ☆10Jun 9, 2021Updated 5 years ago
- Use-after-free in Python☆15Jul 19, 2026Updated 3 months ago
- ☆14Mar 13, 2023Updated 3 years ago
- BlackHat Asia 2025 code and presentations☆17Apr 13, 2025Updated last year
- This repo contains EXPs about Vulnerable Windows Driver☆46May 22, 2024Updated 2 years ago
- Exploit targeting NT kernel in 24H2 Windows Insider Preview☆155Apr 26, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Windows KASLR bypass using prefetch side-channel☆218Apr 26, 2024Updated 2 years ago
- A poc that abuses Enclave☆40Sep 8, 2022Updated 4 years ago
- LPE exploit for CVE-2023-36802☆25Oct 10, 2023Updated 3 years ago
- Bypassing kernel patch protection at runtime☆22Aug 16, 2026Updated 2 months ago
- CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious…☆15Jan 21, 2025Updated last year
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆16Jan 10, 2024Updated 2 years ago
- CVE-2026-83991: Windows Cloud Files access-check bypass☆18Oct 13, 2026Updated 3 weeks ago