
ICALL-GADGET
Exploit for redirecting control flow of a legit kernel module to your own illegitimate kernel module to evade anti-cheats stack walking

Exploit for redirecting control flow of a legit kernel module to your own illegitimate kernel module to evade anti-cheats stack walking

Minimal Windows x64 reflective PE mapper that loads DLLs from memory without LoadLibrary, resolves exports, and dispatches calls through a…

Adaptix C2 agent using Crystal Palace PIC linker and PICO module system

Code execution/injection technique using DLL PEB module structure manipulation

This is a proof-of-concept Metasploit module exploit for CVE-2015-1578, a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation…

BOF to run PE in Cobalt Strike Beacon without console creation

Icecast Header Overwrite buffer overflow RCE < 2.0.1 (Win32)

Automates creation and hosting of a JavaScript XSS payload to install a malicious theme module, triggering a reverse shell via Remote Code Execution…

Cobalt Strike UDRL that performs advanced module stomping using VEH to intercept calls, unmap modules during sleep, and remap fresh modules to evade…

Hide your Powershell script in plain sight. Bypass all Powershell security features

Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)

Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process