zeroSteiner / reflective-polymorphism
Reflective Polymorphism
☆104Updated 6 years ago
Alternatives and similar repositories for reflective-polymorphism:
Users that are interested in reflective-polymorphism are comparing it to the libraries listed below
- ☆51Updated 8 years ago
- Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit☆99Updated 5 years ago
- public bugs/proof of concepts☆48Updated 4 years ago
- Another Repo of Malware. Enjoy. <3☆60Updated 6 years ago
- A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.☆88Updated 10 years ago
- A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext☆50Updated 6 years ago
- An exploit for CVE-2016-7255 on Windows 7/8/8.1/10(pre-anniversary) 64 bit☆81Updated 8 years ago
- A repository of some of my Windows 10 Device Guard Bypasses☆135Updated 7 years ago
- Exploit code used for the HackSysExtremeVulnerableDriver.☆43Updated 6 years ago
- Some sample code from my Zero Nights 2017 presentation.☆62Updated 7 years ago
- Workshop material for a Windows Attack Surface Analysis Workshop☆67Updated 5 years ago
- NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements☆96Updated 7 years ago
- A one-click tool to inject jobs into the BITS queue (Background Intelligent Transfer Service), allowing arbitrary program execution as th…☆98Updated 5 years ago
- PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.☆149Updated 5 years ago
- Public documents related to my talk "Bypass Windows Exploit Guard ASR" at Offensive Con 2019.☆93Updated 6 years ago
- Shim database persistence (Fin7 TTP)☆37Updated 5 years ago
- UAC 0Day all day!☆58Updated 7 years ago
- Tool to make in memory man in the middle☆124Updated 6 years ago
- Simple tool to automate adding shellcode to PE files☆49Updated 6 years ago
- HackSys Extreme Vulnerable Driver - Windows 10 x64 StackOverflow Exploit with SMEP Bypass☆61Updated 7 years ago
- MS17-012 - COM Session Moniker EoP Exploit running within MSBuild.exe☆59Updated 7 years ago
- Supporting Files on my analysis of the malware designated hdroot.☆59Updated 8 years ago
- kernel exploitation helper class☆76Updated 8 years ago
- ☆34Updated 7 years ago
- Use bitsadmin to maintain persistence and bypass Autoruns☆66Updated 7 years ago
- VBS Reversed TCP Meterpreter Stager☆86Updated 7 years ago
- fragments of dirty, and quick code. possible error checking or none.☆24Updated 7 years ago
- Bypassing User Account Control (UAC) using TpmInit.exe☆42Updated 8 years ago
- Python script to inject and run shellcodes through TLS callbacks☆50Updated 9 years ago
- Ps1jacker is a tool for generating COM Hijacking payload.☆61Updated last month