zerosum0x0 / RunShellcode

Related projects: ⓘ

• Cn33liz / TpmInitUACBypass
  ☆135Updated this week
• akayn / PostExploits
  ☆128Updated this week
• zerosum0x0 / puppetstrings
  ☆119Updated this week
• shahriyarj / sysret
  ☆75Updated this week
• monoxgas / Trebuchet
  MS15-076 Privilege Escalation
  ☆98Updated 8 years ago
• subTee / RegistrationFreeCOM
  ☆67Updated this week
• ustayready / CasperStager
  PoC for persisting .NET payloads in Windows Notification Facility (WNF) state names using low-level Windows Kernel API calls.
  ☆147Updated 5 years ago
• re4lity / subTee-gits-backups
  ☆168Updated this week
• BreakingMalwareResearch / eleven
  Elevation by environment variable expansion
  ☆65Updated 7 years ago
• subTee / Shellcode-Via-HTA
  ☆110Updated this week
• govolution / avepoc
  some pocs for antivirus evasion
  ☆129Updated last year
• enigma0x3 / MessageBox
  PoC dlls for Task Scheduler COM Hijacking
  ☆89Updated 8 years ago
• nccgroup / CVE-2017-8759
  NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements
  ☆94Updated 7 years ago
• tyranid / DeviceGuardBypasses
  A repository of some of my Windows 10 Device Guard Bypasses
  ☆133Updated 7 years ago
• caseysmithrc / memMITM
  ☆52Updated this week
• xorrior / Random-CSharpTools
  Collection of CSharp Assemblies focused on Post-Exploitation Capabilities
  ☆221Updated 5 years ago
• Cn33liz / VBSMeter
  ☆85Updated this week
• DimopoulosElias / alpc-mmc-uac-bypass
  UAC Bypass with mmc via alpc
  ☆155Updated 5 years ago
• Arno0x / DNSDelivery
  DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.
  ☆146Updated 4 years ago
• subTee / AllTheThings
  ☆250Updated this week
• 0xbadjuju / WheresMyImplant
  A Bring Your Own Land Toolkit that Doubles as a WMI Provider
  ☆284Updated 5 years ago
• FuzzySecurity / HackSysTeam-PSKernelPwn
  ☆136Updated 7 years ago
• 0x09AL / DropboxC2C
  DropboxC2C is a post-exploitation agent which uses Dropbox Infrastructure for command and control operations.
  ☆145Updated 5 years ago
• GradiusX / HEVD-Python-Solutions
  Python solutions for the HackSysTeam Extreme Vulnerable Driver
  ☆149Updated 3 years ago
• tyranid / ExploitDotNetDCOM
  A tool to exploit .NET DCOM for EoP and RCE. Is fixed in latest versions of the .NET.
  ☆84Updated 9 years ago
• endgameinc / ClrGuard
  ☆213Updated 6 years ago
• malcomvetter / ManagedInjection
  A proof of concept for dynamically loading .net assemblies at runtime with only a minimal convention pre-knowledge
  ☆163Updated 6 years ago
• vallejocc / PoC-Inject-Data-WM_COPYDATA
  A tiny PoC to inject and execute code into explorer.exe with WM_SETTEXT+WM_COPYDATA+SetThreadContext
  ☆49Updated 6 years ago
• Cn33liz / HSEVD-ArbitraryOverwriteGDI
  ☆48Updated this week
• BorjaMerino / Pazuzu
  Pazuzu: Reflective DLL to run binaries from memory
  ☆210Updated 4 years ago