xforcered / Windows_LPE_AFD_CVE-2023-21768Links
LPE exploit for CVE-2023-21768
☆424Updated 2 years ago
Alternatives and similar repositories for Windows_LPE_AFD_CVE-2023-21768
Users that are interested in Windows_LPE_AFD_CVE-2023-21768 are comparing it to the libraries listed below
Sorting:
- LPE exploit for CVE-2023-21768☆504Updated 2 years ago
- ☆557Updated last year
- Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting☆361Updated 2 years ago
- Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit☆279Updated 2 years ago
- ☆177Updated 2 years ago
- Leaked Windows processes handles identification tool☆288Updated 3 years ago
- Collection of Windows Privilege Escalation (Analyse/PoC/Exploit)☆461Updated last year
- laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.☆499Updated 2 years ago
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆665Updated 2 years ago
- DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.☆495Updated 3 years ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆536Updated 3 years ago
- ☆200Updated 3 years ago
- PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"☆307Updated 3 years ago
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆529Updated last year
- Proof-of-Concept for CVE-2023-38146 ("ThemeBleed")☆201Updated 2 years ago
- TartarusGate, Bypassing EDRs☆634Updated 3 years ago
- Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.☆310Updated last year
- ☆319Updated 2 years ago
- Bypassing UAC with SSPI Datagram Contexts☆455Updated 2 years ago
- One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html☆414Updated last year
- Various ways to execute shellcode☆506Updated last year
- Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)☆479Updated 4 years ago
- Protected Process Dumper Tool☆569Updated 2 years ago
- UAC Bypass By Abusing Kerberos Tickets☆503Updated 2 years ago
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆442Updated last year
- Kernel mode WinDbg extension and PoCs for token privilege investigation.☆892Updated 10 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆992Updated last year
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆709Updated 2 years ago
- UAC bypass by abusing RPC and debug objects.☆627Updated 2 years ago
- Awesome AV/EDR/XDR Bypass Tips☆284Updated 2 years ago