marcosd4h

Marcos Oviedo's repositories

XPEViewer

PE file viewer/editor for Windows, Linux and MacOS.

MIT000

kernel_callbacks

Bypasses for Windows kernel callbacks PatchGuard protection

MIT200

Back2TheFuture

Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in order to find the patterns.

BSD-3-Clause000

AsmHalosGate

x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks

100

concealed_position

Bring your own print driver privilege escalation tool

BSD-3-Clause200

DeployPrinterNightmare

C# tool for installing a shared network printer abusing the PrinterNightmare bug to allow other network machines easy privesc!

100

PetitPotam

PetitPotam fork with Kerberos support in the impacket script

100

inceptor

Template-Driven AV/EDR Evasion Framework

NOASSERTION100

ADCSPwn

A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service.

100

malware-and-exploitdev-resources

000

CVE-2021-36934

C# PoC for CVE-2021-36934/HiveNightmare/SeriousSAM

100

wtf

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows.

MIT100

byeintegrity-uac

Bypass UAC by hijacking a DLL located in the Native Image Cache

100

CVE-2021-1675

C# and Impacket implementation of CVE-2021-1675/PrintNightmare

100

CVE-2021-1675-LPE

Local Privilege Escalation Edition for CVE-2021-1675

100

exploit_mitigations

Knowledge base of exploit mitigations available across numerous operating systems, architectures and applications and versions.

100

PrintNightmare

000

stlkrn

C++ STL in the Windows Kernel with C++ Exception Support

MIT000

speakeasy

Windows kernel and user mode emulation.

MIT000

Celeborn

Userland API Unhooker Project

000

AlternativeShellcodeExec

Alternative Shellcode Execution Via Callbacks

000

wowInjector

PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)

GPL-3.0000

W10M_unedited-decomp

Pure Hex-rays Decompiler Psudocode of various Windows 10 Mobile binaries, No edit have been done to the output, you will need to piece together each function, class etc.Provided "as-is"

000