a7t0fwa7 Goto Github PK

windows-local-privilege-escalation-cheatsheet

Windows Privilege Escalation Methodology

windows-login-evasion

Evades login prompt on Windows startup.

windows-ps-callbacks-experiments

Files for http://deniable.org/windows/windows-callbacks

windows-reverseshell

Simple reverse shell to avoid Windows defender and kaspersky detection

windows-syscalls

Windows System Call Tables (NT/2000/XP/2003/Vista/2008/7/2012/8/10)

windows-toolkit

windows_x64_tcp_reverse_shell_shellcode

Null-free shellcode for TCP reverse shell on Windows x64

windowskernelbook

《Windows 内核安全编程技术实践》 系列丛书，探索 Anti RootKit 反内核工具核心原理与技术实现细节。

windowskernelprogrammingbook2e

Samples for the book Windows Kernel Programming, 2nd edition

wineventhooks

SetWinEventHook Sample

winprocessclone

winpwn

Automation for internal Windows Penetrationtest / AD-Security

winternals

A single header for undocumented windows function definitions

wizard-loader

Abuse Xwizard.exe for DLL Side-Loading

wow64injection

Proof of concept for injecting a 64-bit DLL into a 32-bit application

writehat

A pentest reporting tool written in Python. Free yourself from Microsoft Word.

wui3

A Win32 way to use WinUI3

xeexe-topantivirusevasion

Undetectable & Xor encrypting with custom KEY (FUD Metasploit Rat) bypass Top Antivirus like BitDefender,Malwarebytes,Avast,ESET-NOD32,AVG,... & Automatically Add ICON and MANIFEST to excitable

xencrypt

A PowerShell script anti-virus evasion tool

xordata

An open-source C++17 framework to enable obfuscation of constants, variables, and strings.

xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

zero-import-malware

Small project looking into how we can build malware with zero-imports by dynamically resolving windows APIs using GetProcAddress and GetModuleHandle windows APIs.

zeroimport

ZeroImport is a super-lightweight and easy to use C++ library for Windows Kernel Drivers. It allows you to hide any import in your kernel driver by importing at runtime.

zerothreadkernel

Recursive and arbitrary code execution at kernel-level without a system thread creation

zhina

A simple app to exfiltration

zwprocesshollowing

ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption

zydis

Fast and lightweight x86/x86-64 disassembler and code generation library