zeze-zeze / NamedPipeMasterLinks
a tool used to analyze and monitor in named pipes
☆168Updated 8 months ago
Alternatives and similar repositories for NamedPipeMaster
Users that are interested in NamedPipeMaster are comparing it to the libraries listed below
Sorting:
- A tool that is used to hunt vulnerabilities in x64 WDM drivers☆203Updated 3 months ago
- ROP ROCKET is an advanced code-reuse attack framework, with extensive ROP chain generation capabilities, including for novel Windows Sysc…☆125Updated last week
- ☆30Updated last year
- Windows KASLR bypass using prefetch side-channel☆102Updated last year
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆116Updated 11 months ago
- Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2☆228Updated 2 years ago
- ☆175Updated 11 months ago
- Admin to Kernel code execution using the KSecDD driver☆251Updated last year
- CVE-2024-11477 7Zip Code Execution Writeup and Analysis☆62Updated 6 months ago
- HEVD Exploit: BufferOverflowNonPagedPoolNx on Windows 10 22H2 - Escalating from Low Integrity to SYSTEM via Aligned Chunk Confusion☆53Updated 2 months ago
- POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I/O ring IOP_MC_BUFFER_ENTRY☆194Updated 2 months ago
- ☆70Updated 2 years ago
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆290Updated last year
- Slides for COM Hijacking AV/EDR Talk on 38c3☆74Updated 5 months ago
- CVE-2024-30090 - LPE PoC☆107Updated 8 months ago
- CVE-2024-4577 RCE PoC☆24Updated 7 months ago
- Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules☆93Updated this week
- ☆37Updated 7 months ago
- ☆145Updated last year
- WinDbg extension written in Rust to dump the CPU / memory state of a running VM☆117Updated last month
- Static Binary Instrumentation tool for Windows x64 executables☆206Updated last month
- ☆74Updated 11 months ago
- Win32 keylogger that supports all (non-ime using) languages correctly☆50Updated last year
- Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver☆149Updated last year
- Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation☆127Updated last year
- Vulnerable driver research tool, result and exploit PoCs☆195Updated last year
- ☆56Updated 2 years ago
- Playing around with Thread Context Hijacking. Building more evasive primitives to use as alternative for existing process injection techn…☆173Updated last week
- Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)☆72Updated 9 months ago
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆112Updated 9 months ago