Alternatives and similar repositories for Windows_MSKSSRV_LPE_CVE-2023-36802

Users that are interested in Windows_MSKSSRV_LPE_CVE-2023-36802 are comparing it to the libraries listed below

• tyranid / windows-memory-access-traps
  A few examples of how to trap virtual memory access on Windows.
  ☆34Updated 9 months ago
• Slowerzs / KeyJumper
  ☆50Updated 6 months ago
• ommadawn46 / HEVD-BufferOverflowNonPagedPoolNx-Win10-22H2
  HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion
  ☆60Updated 5 months ago
• alfarom256 / MCP-PoC
  Minifilter Callback Patching Proof-of-Concept
  ☆74Updated 2 years ago
• scrt / KexecDDPlus
  Exploiting the KsecDD Windows driver through Server Silos
  ☆74Updated 10 months ago
• RomanRybachek / CVE-2024-20698
  Analysis of the vulnerability
  ☆51Updated last year
• exploits-forsale / CVE-2024-26218
  Proof-of-Concept for CVE-2024-26218
  ☆54Updated last year
• 0x4d5a-ctf / 38c3_com_talk
  Slides for COM Hijacking AV/EDR Talk on 38c3
  ☆74Updated 9 months ago
• Archie-osu / PowerHook
  Hooking KPRCB IdlePreselect function to gain execution inside PID 0.
  ☆68Updated 5 months ago
• connormcgarr / EATGuard
  Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)
  ☆112Updated 2 years ago
• m417z / thread-call-stack-scanner
  Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…
  ☆79Updated 3 months ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆116Updated 2 years ago
• bluefrostsecurity / Windows-Drive-Remapping-EoP
  ☆32Updated last year
• V-i-x-x / win11-kernel-execution-syscall-hijack
  Executing Kernel Routines via Syscall Table Hijack (Kernel Code Execution)
  ☆45Updated 3 months ago
• JanielDary / weetabix
  A C++ PoC implementation for enumerating Windows Fibers directly from memory
  ☆20Updated last year
• synacktiv / windows_kernel_shadow_stack
  Proof of concepts demonstrating some aspects of the Windows kernel shadow stack mitigation.
  ☆50Updated 4 months ago
• Crypt0s / Ekko_CFG_Bypass
  A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process
  ☆106Updated 3 years ago
• xct / CVE-2024-27460
  Plantronics Desktop Hub LPE
  ☆36Updated last year
• whokilleddb / ETWListicle
  List the ETW provider(s) in the registration table of a process.
  ☆63Updated 2 years ago
• rad9800 / VehApiResolve
  ☆114Updated 3 years ago
• Reijaff / offensive_c
  ☆42Updated 2 years ago
• xaitax / ARM64-ReflectiveDLLInjection
  A Proof-of-Concept implementation of Reflective DLL Injection (RDI) specifically for Windows on ARM64. Demonstrates PEB access via the x1…
  ☆30Updated 4 months ago
• Crowdfense / CVE-2024-21338
  Windows AppLocker Driver (appid.sys) LPE
  ☆66Updated last year
• jbaines-r7 / dellicious
  Enabled / Disable LSA Protection via BYOVD
  ☆80Updated 3 years ago
• lem0nSec / Dsebler
  Reimplementation of the KExecDD DSE bypass technique.
  ☆53Updated last year
• rbmm / RtlClone
  ☆42Updated 7 months ago
• NVISOsecurity / Interceptor
  Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
  ☆124Updated 2 years ago
• CaledoniaProject / drivers-binaries
  Exploitable drivers, you know what I mean
  ☆155Updated last week
• synacktiv / keebcap
  Win32 keylogger that supports all (non-ime using) languages correctly
  ☆52Updated last year
• DriverHunter / Win-Driver-EXP
  This repo contains EXPs about Vulnerable Windows Driver
  ☆47Updated last year