Lucene search
+L

27 matches found

Kitploit
Kitploit
added 2026/09/15 8:44 a.m.8 views

LazyHook

Overview LazyHook is a stealthy API hooking framework that bypasses Host Intrusion Prevention Systems HIPS through call stack spoofing. By leveraging CPU-level hardware breakpoints and Vectored Exception Handling, it executes arbitrary code as if it originated from trusted, Microsoft-signed...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 7:38 a.m.14 views

DLLHSC

DLLHSC DLL Hijack SCanner: una herramienta para generar pistas y automatizar el descubrimiento de candidatos para el secuestro del orden de búsqueda de DLL Índice de esta página Contenido de este repositorio Modos de operación Guía de compilación y ejecución Menú de ayuda Ejemplos de ejecución...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:50 a.m.5 views

RdpThief

RdpThief RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/15 6:32 a.m.11 views

frida-wshook

frida-wshook frida-wshook es una herramienta de análisis e instrumentación que utiliza frida.re para hookear funciones comunes a menudo utilizadas por archivos de script maliciosos que se ejecutan mediante WScript/CScript. La herramienta intercepta funciones de la API de Windows y no implementa...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 6:22 a.m.3 views

Introspy-iOS

Introspy-iOS Blackbox tool to help understand what an iOS application is doing at runtime and assist in the identification of potential security issues. See http://isecpartners.github.io/Introspy-iOS/ for a quick introduction. Description This is the repository for the Introspy-iOS tracer. The...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 1:42 a.m.10 views

NetRipper

Description NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before encryption/after...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 1:03 a.m.10 views

RDPCredentialStealer

RDPCredentialStealer RDPCredentialStealer es un implante que roba credenciales proporcionadas por los usuarios en RDP mediante API Hooking con Detours en C++ Herramienta de Prueba de Concepto para el Robo de Credenciales Probemos esto: Primero, transfiero la DLL del repositorio de GitHub a la rut...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 11:54 p.m.10 views

NoArgs

NoArgs: Manipulación y Ocultación de Argumentos de Procesos Twitter: @AzizWho Aviso: Solo para Fines Educativos Esta herramienta está destinada únicamente a fines educativos. No soy responsable de ningún uso indebido y todos los usuarios deben cumplir con las leyes aplicables. El uso ilegal está...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 11:45 p.m.10 views

TrickDump

TrickDump TrickDump extrae el proceso lsass sin crear un archivo Minidump, generando en su lugar 3 archivos JSON y 1 archivo ZIP con los volcados de regiones de memoria. En tres pasos: Lock : Obtener información del SO usando RtlGetVersion. Shock : Obtener el privilegio SeDebugPrivilege con...

6.4AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/08 4:56 p.m.7 views

AV-EDR-Lab-Environment-Setup

AV/EDR Lab Environment Setup Initially taken from Maldev Academy Discord and added more resources. Notion Notes : https://an0nud4y.notion.site/AV-EDR-Lab-Env-Setup-130bc870022d8071935cc682d3eb34b9?pvs=4 An example of things that can be used to emulate certain features that paid edrs have: SACL -...

6AI score
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.19 views

EUVD-2003-0635

Malware in sbrugna...

4.6CVSS6.4AI score0.00364EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2024/06/16 5:16 p.m.75 views

NativeDump - Dump Lsass Using Only Native APIs By Hand-Crafting Minidump Files (Without MinidumpWriteDump!)

NativeDump allows to dump the lsass process using only NTAPIs generating a Minidump file with only the streams needed to be parsed by tools like Mimikatz or Pypykatz SystemInfo, ModuleList and Memory64List Streams. NTOpenProcessToken and NtAdjustPrivilegeToken to get the "SeDebugPrivilege"...

7.3AI score
SaveExploits0References5
Kitploit
Kitploit
added 2024/04/28 12:30 p.m.73 views

CrimsonEDR - Simulate The Behavior Of AV/EDR For Malware Development Training

CrimsonEDR is an open-source project engineered to identify specific malware patterns, offering a tool for honing skills in circumventing Endpoint Detection and Response EDR. By leveraging diverse detection methods, it empowers users to deepen their understanding of security evasion tactics...

7.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2023/12/27 11:30 a.m.73 views

BestEdrOfTheMarket - Little AV/EDR Bypassing Lab For Training And Learning Purposes

Little AV/EDR Evasion Lab for training & learning purposes. ️ under construction..​ | | | | | | \ / \ / | | | | | \ / / | | | | | | | | | | | | | | | | | | ' \ / \ | | | /\ \ | | || || | | || | | | | | | | | / |/||/| ||/|| \ /|| || || ||| | / | | | | | | |/| |/ | '| |/ / \ | | | | | | | |...

7.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2021/09/21 8:30 p.m.30 views

PyHook - An Offensive API Hooking Tool Written In Python Designed To Catch Various Credentials Within The API Call

PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida to inject it's dependencies into the target process Supported Processes Process | API Call | Description | Progress ---|---|---|--- mstsc |...

7.2AI score
SaveExploits0References3
Kitploit
Kitploit
added 2021/03/15 11:30 a.m.67 views

DLLHSC - DLL Hijack SCanner A Tool To Assist With The Discovery Of Suitable Candidates For DLL Hijacking

DLL Hijack SCanner - A tool to generate leads and automate the discovery of candidates for DLL Search Order Hijacking Contents of this repository This repository hosts the Visual Studio project file for the tool DLLHSC, the project file for the API hooking functionality detour, the project file f...

7.5AI score
SaveExploits0References2
Kitploit
Kitploit
added 2019/11/23 12:30 p.m.115 views

RdpThief - Extracting Clear Text Passwords From Mstsc.Exe Using API Hooking

RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and injecting the...

7.4AI score
SaveExploits0References2
Schneier on Security
Schneier on Security
added 2018/01/05 3:00 p.m.32 views

Detecting Adblocker Blockers

Interesting research on the prevalence of adblock blockers: "Measuring and Disrupting Anti-Adblockers Using Differential Execution Analysis": Abstract: Millions of people use adblockers to remove intrusive and malicious ads as well as protect themselves against tracking and pervasive surveillance...

7.1AI score
SaveExploits0
zdt
zdt
added 2017/10/17 12:00 a.m.34 views

Windows/x64 - API Hooking Shellcode (117 bytes)

/ Title : Windows x64 API Hooking Shellcode Author : Roziul Hasan Khan Shifat Size : 117 bytes Date : 16/10/2017 Email : email protected Tested On : Windows 7 Ultimate x64 / / This Shellcode hooks DeteleFileW API Warning: Do no Use this Shellcode on explorer.exe Otherwise You won't be able to...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2017/10/16 12:00 a.m.67 views

Windows x64 - API Hooking Shellcode (117 bytes)

Windows x64 - API Hooking Shellcode 117 bytes. Shellcode exploit for Winx86-64 platform / Title : Windows x64 API Hooking Shellcode Author : Roziul Hasan Khan Shifat Size : 117 bytes Date : 16/10/2017 Email : [email protected] Tested On : Windows 7 Ultimate x64 / / This Shellcode hooks...

7.1AI score
SaveExploits0
Rows per page
Query Builder