ommadawn46

sliver

Adversary Emulation Framework

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

UACME

Defeating Windows User Account Control

Seatbelt

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

awesome-threat-detection

✨ A curated list of awesome threat detection and hunting resources 🕵️‍♂️

xzbot

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

HackSysExtremeVulnerableDriver

HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux

Awesome-Advanced-Windows-Exploitation-References

List of Awesome Advanced Windows Exploitation References

ai-exploits

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

noPac

CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

atom-bombing

Brand New Code Injection for Windows

Misconfiguration-Manager

Misconfiguration Manager is a central knowledge base for all known Microsoft Configuration Manager tradecraft and associated defensive and hardening guidance.

SpecuCheck

SpecuCheck is a Windows utility for checking the state of the software mitigations and hardware against CVE-2017-5754 (Meltdown), CVE-2017-5715 (Spectre v2), CVE-2018-3260 (Foreshadow), and CVE-2018-3639 (Spectre v4)

windows_kernel_address_leaks

Examples of leaking Kernel Mode information from User Mode on Windows

CVE-2022-21882

win32k LPE

SharpWSUS

CVE-2021-1732-Exploit

CVE-2021-1732 Exploit

LdrLockLiberator

For when DLLMain is the only way

CdpSvcLPE

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

PageTableInjection

Code Injection, Inject malicious payload via pagetables pml4.

Windows-kernel-SegmentHeap-Aligned-Chunk-Confusion

PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap

snapshot

WinDbg extension written in Rust to dump the CPU / memory state of a running VM

coppersmith

Coppersmith method (solving polynomial equation over composite modulus on small bounds)

RtlCaptureContext-CFG-Bypass

Internet Explorer Exploit with CFG bypass for Windows 10

Meltdown-KVA-Shadow-Leak

CVE-2023-48788

Fortinet FortiClient EMS SQL Injection

tagWnd-Hardening-Bypass

Bypass for the hardening against usage of tagWnd as a kernel read/write primitive

AVTOKYO2023

AVTOKYO2023 Talks ~AIチャットボットに対する Prompt Injection と Filter Bypass~

microarchitectural-attack

Meltdown/Spectre PoC for Windows

CVE-2021-31955-POC