Alternatives and similar repositories for WindowsKernelVuln

Users that are interested in WindowsKernelVuln are comparing it to the libraries listed below

• DriverHunter / Win-Driver-EXP
  This repo contains EXPs about Vulnerable Windows Driver
  ☆46Updated last year
• aaaddress1 / wowGrail
  PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)
  ☆106Updated 4 years ago
• alfarom256 / HPHardwareDiagnostics-PoC
  PoC exploit for HP Hardware Diagnostic's EtdSupp driver
  ☆50Updated 2 years ago
• bluesadi / Heavens-Gate
  Heaven's Gate implementation in C for constructing x64 Win32 API call in x86 WoW64 processes.
  ☆71Updated 3 years ago
• zeze-zeze / CYBERSEC2023-BYOVD-Demo
  ☆31Updated last year
• jdu2600 / CFG-FindHiddenShellcode
  Walks the CFG bitmap to find previously executable but currently hidden shellcode regions
  ☆118Updated 2 years ago
• heyheysky / vulnerable-driver
  ☆12Updated 6 months ago
• shaygitub / windows-rootkit
  windows rootkit
  ☆60Updated last year
• alfarom256 / CVE-2022-3699
  Lenovo Diagnostics Driver EoP - Arbitrary R/W
  ☆174Updated 2 years ago
• xenoscr / manual-syscall-detect
  A tool for detecting manual/direct syscalls in x86 and x64 processes using Nirvana Hooks.
  ☆113Updated 3 years ago
• jackullrich / syscall-detect
  PoC capable of detecting manual syscalls from usermode.
  ☆198Updated 7 months ago
• CaledoniaProject / drivers-binaries
  Exploitable drivers, you know what I mean
  ☆150Updated last year
• zeze-zeze / 2023iThome
  ☆39Updated 7 months ago
• fortra / CVE-2022-37969
  Windows LPE exploit for CVE-2022-37969
  ☆135Updated 2 years ago
• mathisvickie / CVE-2021-21551
  arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system
  ☆57Updated 3 years ago
• zer0condition / Demystifying-PatchGuard
  Demystifying PatchGuard is a comprehensive analysis of Microsoft's security feature called PatchGuard, which is designed to prevent unaut…
  ☆125Updated 2 years ago
• m417z / LdrDllNotificationHook
  Hook all callbacks which are registered with LdrRegisterDllNotification
  ☆88Updated 3 months ago
• blueflagss / inline-syscall
  A simple direct syscall wrapper written in C++ with compatibility for x86 and x64 programs.
  ☆53Updated 5 months ago
• D0pam1ne705 / Direct-NtCreateUserProcess
  Call NtCreateUserProcess directly as normal.
  ☆71Updated 3 years ago
• je5442804 / CreateProcessInternalW-Full
  Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post
  ☆64Updated 10 months ago
• estimated1337 / lenovo_exec
  CVE-2022-3699 with arbitrary kernel code execution capability
  ☆71Updated 2 years ago
• gabriellandau / ShadowStackWalk
  Finding Truth in the Shadows
  ☆110Updated 2 years ago
• Xacone / Eneio64-Driver-Exploit
  Exploit for eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W
  ☆39Updated last month
• kkent030315 / PageTableInjection
  Code Injection, Inject malicious payload via pagetables pml4.
  ☆241Updated 4 years ago
• L4ys / IDA-WPP-Remover
  Remove WPP calls from hexrays decompiled code
  ☆50Updated 3 months ago
• VoidSec / ioctlpus
  IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).
  ☆92Updated 3 years ago
• uf0o / windows-ps-callbacks-experiments
  Files for http://blog.deniable.org/posts/windows-callbacks/
  ☆76Updated 3 years ago
• za233 / NeacController
  Exploit vulnerabilities in NeacSafe64.sys to achieve privilege escalation and kernel-mode shellcode execution
  ☆11Updated 2 weeks ago
• tinysec / rtypes
  A simple but useful project maybe help you reverse Windows.
  ☆38Updated last year
• AdamOron / PatchGuardBypass
  Bypassing PatchGuard on modern x64 systems
  ☆262Updated 2 years ago