
CVE-2017-8759-exploits
Two versions of CVE-2017-8759 exploits

Two versions of CVE-2017-8759 exploits

PoC for LPE with QlikView

PE loader with various shellcode injection techniques

For when DLLMain is the only way

Runtime Windows API interception library for hooking, monitoring, and instrumenting function calls. Supports binary rewriting and DLL injection,…

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具,它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码,帮助红队人员更方便快…

Kernel-mode Windows driver for real-time detection of process injection techniques, including shellcode, DLL, and reflective injection, with syscall…

DLL Password Filter Implant with Exfiltration Capabilities

Remote DLL Injection with Timer-based Shellcode Execution

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post

freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package

Full static & memory analysis of Overlord RAT: Go agent architecture, HTTP/2 + WebSocket C2, reflective DLL injection, browser keylogging, and IOCs.…

Native Delphi implementation of PE-sieve functionality with a reusable library, CLI, and PE-sieve-compatible DLL for HollowsHunter integration.

Technical analysis, writeup, and YARA rules for a DLL Sideloading campaign disguised as HWMonitor

A comprehensive PowerShell-based SharePoint security monitoring solution with CVE-2025-53770 protection, advanced DLL analysis, threat detection, and…