element2023h Goto Github PK

ac

kernel mode anti cheat

awesome-game-security

awesome game security [Welcome to PR]

blackbone

Windows memory hacking library

cve-2023-28252

cve-2023-36424

Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation

cve-2024-0197-poc

Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK.

cve-2024-21338

Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

darkwidow

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

drvscan

scan system / process integrity

element2023h

Config files for my GitHub profile.

exploits-cve-2024-21338

Repo with different exploits & PoCs CVE-2024-21338

fumo_loader

All in one kernel-based DLL injector

github-chinese-top-charts

:cn: GitHub中文排行榜，各语言分设「软件 | 资料」榜单，精准定位中文好项目。各取所需，高效学习。

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

interview

📚 C/C++ 技术面试基础知识总结，包括语言、程序库、数据结构、算法、系统、网络、链接装载库等知识及面试经验、招聘、内推等信息。

kdmapper

KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

kdu

Kernel Driver Utility

kernel-bridge

Windows kernel hacking framework, driver template, hypervisor and API written on C++

kungfu

Kungfu Trader

kvm-guest-drivers-windows

Windows paravirtualized drivers for QEMU\KVM

layerfsd

Layered File System Driver for Windows

librehardwaremonitor

Libre Hardware Monitor, home of the fork of Open Hardware Monitor

mmloader

A library for loading dll module bypassing windows PE loader from memory (x86/x64)

mvisor-win-vgpu-driver

Implementation of OpenGL on windows guest virtual machine using Mesa/Virgl protocol.

mydlp-endpoint-win

MyDLP Windows Endpoint Filter

ntdiff

openvpn

OpenVPN is an open source VPN daemon

phnt

Native API header files for the System Informer project.

poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

qemu-anti-detection

A patch to hide qemu itself, bypass mhyprot,EAC,nProtect / VMProtect,VProtect, Themida, Enigma Protector,Safegine Shielden