winterknife / PINKPANTHER
Windows x64 handcrafted token stealing kernel-mode shellcode
☆504Updated 9 months ago
Alternatives and similar repositories for PINKPANTHER:
Users that are interested in PINKPANTHER are comparing it to the libraries listed below
- Venom is a library that meant to perform evasive communication using stolen browser socket☆375Updated last year
- UAC bypass by abusing RPC and debug objects.☆609Updated last year
- PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.☆571Updated last year
- Shellcode injection technique. Given as C++ header, standalone Rust program or library.☆690Updated last year
- It's a go variant of Hells gate! (directly calling windows kernel functions, but from Go!)☆493Updated 2 years ago
- Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs☆720Updated 10 months ago
- Various ways to execute shellcode☆476Updated 10 months ago
- This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.☆481Updated last month
- ☆465Updated 2 years ago
- KaynLdr is a Reflective Loader written in C/ASM☆527Updated last year
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆627Updated 2 years ago
- Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging☆522Updated 10 months ago
- Spartacus DLL/COM Hijacking Toolkit☆1,008Updated 11 months ago
- baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability☆319Updated last year
- PoCs and tools for investigation of Windows process execution techniques☆888Updated last month
- Execute ELF files without dropping them on disk☆487Updated 6 months ago
- Dump the memory of a PPL with a userland exploit☆855Updated 2 years ago
- some gadgets about windows process and ready to use :)☆581Updated last year
- Signtool for expired certificates☆465Updated last year
- Leaked Windows processes handles identification tool☆281Updated 2 years ago
- ☆568Updated 2 months ago
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆551Updated last year
- A tool that shows detailed information about named pipes in Windows☆579Updated 2 months ago
- Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs☆1,180Updated last year
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆504Updated 2 years ago
- Kernel mode WinDbg extension and PoCs for token privilege investigation.☆828Updated this week
- Aims to identify sleeping beacons☆525Updated last month
- Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]☆595Updated 2 years ago