
CLR-Unhook
Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan in-memory…
defensive-toolsexploitationpayload-development+3
214

Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan in-memory…

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

Leverage WindowsApp createdump tool to obtain an lsass dump

Hardware breakpoint hooking engine for Windows that uses debug registers to hook functions, bypass ETW/AMSI, and evade user-land EDR monitoring.

Automated proof-of-concept exploit for CVE-2026-60004, a Gitea diffpatch Git hook RCE that plants a post-index-change hook to gain a reverse shell as…

Hook PasswordChangeNotify

exp for CVE-2019-0887