alfarom256

CVE-2022-3699

Lenovo Diagnostics Driver EoP - Arbitrary R/W

LogMeInPoCHandleDup

MCP-PoC

Minifilter Callback Patching Proof-of-Concept

drivers_and_shit

HPHardwareDiagnostics-PoC

PoC exploit for HP Hardware Diagnostic's EtdSupp driver

CVE-2022-45451

PoC for Acronis Arbitrary File Read - CVE-2022-45451

MinifilterResearch

smokescreen

get it, because it's a pipe filter?

Vulnerability-REsearch

Binarly Vulnerability Research Advisories

alfarom256.github.io

CallMeWin32kDriver

Load your driver like win32k.sys

efiXplorer

IDA plugin for UEFI firmware analysis and reverse engineering automation

angryorchard

A kernel vulnerability used to achieve arbitrary read-write on Windows prior to July 2022

AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

bootkit-rs

Rusty Bootkit - UEFI Bootkit in Rust

bootlicker

A generic UEFI bootkit used to achieve initial usermode execution. It works with modifications.

golfclub

Binary Golf Examples and Resources

HyperDeceit

HyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system tasks with ease.

Network-Covert-Channels-A-University-level-Course

A free online class on network information hiding/steganography/covert channels that I teach at the FernUniversität in Hagen, Germany, and HS Worms, Germany.

peafl64

Static Binary Instrumentation tool for Windows x64 executables

PINKPANTHER

Windows x64 handcrafted token stealing kernel-mode shellcode

psyscalls-rs

Rusty Parallel Syscalls library

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

SimpleNTSyscallFuzzer

VMProtect-Source

Source of VMProtect (NOT OFFICIALLY)

alfarom256

PPLFault

SharpDPAPI

SharpDPAPI is a C# port of some Mimikatz DPAPI functionality.

SilentMoonwalk

PoC Implementation of a TRUE call stack spoofer (fork)