zzhsec / NlsCodeInjectionThroughRegistry
Dll injection through code page id modification in registry. Based on jonas lykk research
☆17Updated 2 years ago
Alternatives and similar repositories for NlsCodeInjectionThroughRegistry:
Users that are interested in NlsCodeInjectionThroughRegistry are comparing it to the libraries listed below
- ☆29Updated 4 months ago
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆51Updated 3 months ago
- Mentally ill EtwTi parser☆36Updated 3 weeks ago
- Rust template/library for implementing your own COFF loader☆50Updated 2 months ago
- ForsHops☆41Updated last month
- a demo module for the kaine agent to execute and inject assembly modules☆37Updated 7 months ago
- early cascade injection PoC based on Outflanks blog post, in rust☆57Updated 5 months ago
- ☆86Updated 8 months ago
- Hooking KPRCB IdlePreselect function to gain execution inside PID 0.☆37Updated last week
- An advanced utility for converting Windows Portable Executable (PE) files to position-independent code (PIC) shellcode. It enables execut…☆25Updated last month
- Callstack spoofing using a VEH because VEH all the things.☆21Updated last month
- A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.☆29Updated 2 months ago
- Shellcode Loader Utilizing ETW Events☆63Updated last month
- converts sRDI compatible dlls to shellcode☆23Updated 3 months ago
- Proxy function calls through the thread pool with ease☆25Updated last month
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆61Updated last year
- stack spoofing☆84Updated 5 months ago
- ☆55Updated 3 months ago
- Exploiting the KsecDD Windows driver through Server Silos☆66Updated 5 months ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆54Updated 6 months ago
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆42Updated 9 months ago
- ☆42Updated 3 weeks ago
- Post-Ex BOF tooling for Hannibal☆20Updated 5 months ago
- shell code example☆46Updated last week
- A modern Rust implementation of the original Stardust project, providing a sophisticated 32/64-bit shellcode template that features posit…☆53Updated last month
- A collection of position independent coding resources☆76Updated 2 months ago
- A synergized Visual Studio and Rust development environment☆18Updated 3 months ago
- remote process injections using pool party techniques☆58Updated 2 months ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆76Updated 2 months ago
- BOF for C2 framework☆41Updated 5 months ago