djn3m0

Sourcetrail

Sourcetrail - free and open-source interactive source explorer

tiny-AES-c

Small portable AES128/192/256 in C

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

BlackLotus

BlackLotus UEFI Windows Bootkit

revng

revng: the core repository of the rev.ng project

awesome-edr-bypass

Awesome EDR Bypass Resources For Ethical Hacking

Freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

SubSeven

SubSeven Legacy Official Source Code Repository

Windows_LPE_AFD_CVE-2023-21768

LPE exploit for CVE-2023-21768

Windows_LPE_AFD_CVE-2023-21768

LPE exploit for CVE-2023-21768

akamai-security-research

This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.

NTDLLReflection

Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll , and trigger exported APIs from the export table

HeapCrypt

Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap

CVE

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

RemoteShellcodeExec

Execute shellcode from a remote-hosted bin file using Winhttp.

IoRingReadWritePrimitive

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2

CVE-2022-42046

CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM

Platbox

UEFI and SMM Assessment Tool

cve-2022-31705

CVE-2022-31705 (Geekpwn 2022 Vmware EHCI OOB) POC

masm32-kernel-programming

masm32 kernel programming, drivers, tutorials, examples, and tools (credits Four-F)

IE9-IE11-Vulnerability-Advanced-Exploitation

Public slides and demo code of bypassing security protection in the latest Windows Internet Explorer.

ttexplore

TTexplore is a library that performs path exploration on binary code using symbolic execution

VMware_ESXI_OpenSLP_PoCs

CVE-2020-3992 & CVE-2019-5544

CVE-2023-21716

A vulnerability within Microsoft Office's wwlib allows attackers to achieve remote code execution with the privileges of the victim that opens a malicious RTF document. The attacker could deliver this file as an email attachment (or other means).

BlockNonMSModules

Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules

cve-2018-8174_analysis

Analysis of VBS exploit CVE-2018-8174

smt-jit

Simple JIT evaluator for a subset of SMT-LIB

Internet_Explorer_11_Exploit

IE11 Exploit cheat sheets: array fengshui, typed array exploit lib, 1 UAF exploit

PostScript-Interpreter

z3jit

A JIT engine to compile z3 constraints to make model-validation as fast as possible