
Kernel_VADInjector
Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver
adversarial-attackids-ips-evasionpayload-development+3
54

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.

Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC

Inject DLLs into the explorer process using icons

Weaponize DLL hijacking easily. Backdoor any function in any DLL.

Signtool for expired certificates

A Bumblebee-inspired Crypter

Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post