gavz Goto Github PK

printnightmare-1

Information on the Windows Spooler vulnerability - CVE-2021-1675; CVE 2021 34527

printnightmare-2

printnightmare-3

Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)

printspoofer

Abusing Impersonation Privileges on Windows 10 and Server 2019

priv2admin

Exploitation paths allowing you to (mis)use the Windows Privileges to elevate your rights within the OS.

privatecollaborator

A script for installing private Burp Collaborator

privesccheck

Privilege Escalation Enumeration Script for Windows

privexec

Run the program with the specified permission level

privfu

Kernel mode WinDbg extension and PoCs for token privilege investigation.

privilege-escalation

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

probatorum-edr-userland-hook-checker

Project to check which Nt/Zw functions your local EDR is hooking

probfuscator

An Obfuscation Approach using Probabilistic Control Flows

process-dump

Windows tool for dumping malware PE files from memory back to disk for analysis.

process-hollowing

Great explanation of Process Hollowing (a Technique often used in Malware)

process-injection

process-magics

This is a collection of interesting codes about Windows Process creation.

process_doppelganging

My implementation of enSilo's Process Doppelganging (PE injection technique)

process_ghosting

process_overwriting

Yet another variant of Process Hollowing

process_protection_level_bof

processexplorer_hidden_dllname

processghosting

Small POC for process ghosting

processhider

Post-exploitation tool for hiding processes from monitoring applications

processhollowing

Simple Process Hollowing in C#

processinjection

Repo for process injection source files

processinjection-1

The program is designed to inject shellcode in a target process.

processrefund

An attempt at Process Doppelgänging

processreimaging

Process reimaging proof of concept code

processspawncontrol

Process Spawn Control is a Powershell tool which aims to help in the behavioral (process) analysis of malware. PsC suspends newly launched processes, and gives the analyst the option to either keep the process suspended, or to resume it.

procgate

POC app to demo procfs leaks on Android systems