FirstBlue's Stars
hfiref0x/UACME
Defeating Windows User Account Control
TheCruZ/kdmapper
KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory
p3nt4/PowerShdll
Run PowerShell with rundll32. Bypass software restrictions.
Idov31/Nidhogg
Nidhogg is an all-in-one simple to use rootkit.
vitoplantamura/BugChecker
SoftICE-like kernel debugger for Windows 11
hackerhouse-opensource/iscsicpl_bypassUAC
UAC bypass for x64 Windows 7 - 11
klezVirus/SilentMoonwalk
PoC Implementation of a fully dynamic call stack spoofer
frkngksl/Shoggoth
Shoggoth: Asmjit Based Polymorphic Encryptor
Dec0ne/HWSyscalls
HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.
wbenny/DetoursNT
Detours with just single dependency - NTDLL
zodiacon/windowskernelprogrammingbook
The Windows Kernel Programming book samples
wbenny/KSOCKET
KSOCKET provides a very basic example how to make a network connections in the Windows Driver by using WSK
deepinstinct/Lsass-Shtinkering
itm4n/PPLcontrol
Controlling Windows PP(L)s
wolfSSL/wolfssl-examples
Example applications using the wolfSSL lightweight SSL/TLS library
gmh5225/CallMeWin32kDriver
Load your driver like win32k.sys
LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection
This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can be used for stealthy code injection.
MiroKaku/libwsk
The Kernel-Mode Winsock library, supporting TCP, UDP and Unix sockets (DGRAM and STREAM).
rad9800/hwbp4mw
hjc4869/UacBypass
A demo to bypass windows 10 default UAC configuration using IFileOperation and dll hijacking
nospaceships/raw-socket-sniffer
Packet capture on Windows without a kernel driver
BarbaTunnelCoder/BarbaTunnel
A layer that hide, redirect. forward, re-encrypt internet packet to keep VPN, Proxies and other p2p software hidden from Firewall. Free implementation for HTTP-Tunnel, UDP-Tunnel, port forwarding, port redirecting and packet re-encryption that can work in network data-link layer and transport layer
SaadAhla/ntdlll-unhooking-collection
different ntdll unhooking techniques : unhooking ntdll from disk, from KnownDlls, from suspended process, from remote server (fileless)
paranoidninja/Proxy-DLL-Loads
The code is a pingback to the Dark Vortex blog:
kiyolee/zlib-win-build
zlib Windows build with Visual Studio.
paranoidninja/Proxy-Function-Calls-For-ETwTI
The code is a pingback to the Dark Vortex blog: https://0xdarkvortex.dev/hiding-memory-allocations-from-mdatp-etwti-stack-tracing/
kiyolee/openssl1_1-win-build
openssl-1.1 Windows build with Visual Studio.
Dark7oveRR/kdmapper
KDMAPPER build [1809,1903,1909,2004]
ASkyeye/CVE-2018-19320
Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement (DSE)
wumb0/zerosum0x0_SassyKitdi
Clone of zerosum0x0's Windows Kernel rootkit written in Rust