Kernel_VADInjector

驱动 DLL 注入器 驱动 DLL 注入器 描述 驱动 DLL 注入器是一个强大的工具，允许用户使用他们喜欢的映射器加载他们选择的驱动程序。通过利用未签名驱动程序加载器（如 KDmapper）的功能，该注入器是在 Windows 10 2004 x64 进程上构建和测试的。 驱动部分： 该驱动程序挂钩一个名为 xKdEnumerateDebuggingDevices 的补丁保护安全函数，用于与我们的用户模式进程通信。这种方法在流行的反作弊系统中很容易被检测到，因此我们更进一步，将用户模式线程困在内核中，以恢复原始函数地址的方式进行通信，从而绕过函数完整性检查。...

RemoteDLLInjector

介绍 这是一个可用于 DLL 注入的工具： 从 RemoteDLLInjector 执行的那一刻起，它将提供为实现 DLL 注入所执行的完整步骤。 如果 DLL 成功注入，它将返回一个具有该进程权限的 meterpreter 会话。因此，权限高于标准进程的进程可能被滥用，以实现权限提升。...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

maalik

Maalik Network Pivoting and Post Exploitation Framework. Features Console Features Desktop notification on new session. Kill Online session easily. Build Maalik Client, Fhdawn easily. Configurable values in settings.ini Root shell. Multithreaded, Get multiple sessions. Maalik is extremenly easy t...

ShimMe

ShimMe 来自 DEFCON 32 演讲 "SHIM me what you got - Manipulating Shim and Office for Code Injection" 的工具 Office 注入器 - 调用 OfficeClickToRun 服务中的 RPC 方法，将 DLL 注入到由任务计划程序服务启动、以 NT AUTHORITY\SYSTEM 身份运行的挂起进程中，从而实现从管理员到 SYSTEM 的权限提升。 Shim 注入器 - 将未公开记录的 shim 数据结构写入另一个进程的内存，使 apphelp.dll 对该进程应用 “Inject Dll”...

Remote-DLL-Injection-with-Timer-based-Shellcode-Execution

基于定时器 Shellcode 执行的远程 DLL 注入 文档已更新，修正了之前错误的进程注入标题！ ⚠ 仅供教育研究使用 本仓库包含的安全研究内容仅用于教育目的 和 授权使用 。 请负责任地使用，并遵守所有适用的法律法规。 概述 基于定时器 Shellcode 执行的远程 DLL 注入 是一种利用 Windows 线程池执行 shellcode 的技术。该技术采用经典的 DLL 注入与 CreateThreadpoolTimer 相结合的方式，借助合法的系统线程在内存中运行 shellcode，隐蔽性强，很可能绕过现代防御机制。 这种方法引入了一种基于定时器 Shellcode...

GoRedOps

GoRedOps Telegram: https://t.me/ebytelabs GoRedOps is a collection of Golang projects designed specifically for red teamers and offensive security operations. This repository provides various tools and techniques essential for penetration testing, exploitation, and security research. Table of...

GoDefender

🛡️ GoDefender 🛡️ A powerful Go-based security toolkit designed to detect and defend against debugging, virtualization, and DLL injection attacks. GoDefender provides comprehensive protection mechanisms to make reverse engineering and analysis significantly more difficult. ⚠️ WINDOWS ONLY - Designed...

DumpChromeSecrets

!IMPORTANT This project is no longer maintained. Please useDumpBrowserSecrets instead, which supports Chrome, Edge, Brave, Firefox, Opera, Opera GX, and Vivaldi. DumpChromeSecrets Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsi...

ncloader

Ncloader Una utilidad simple de inyección de DLL El diseño actual implementa la conocida técnica de inyección de DLL: VirtualAllocEx asigna memoria para la cadena en el proceso remoto WriteProcessMemory escribe la "ruta/al/archivo/dll" en la memoria asignada de forma remota CreateRemoteThread con...

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

EUVD-2025-210687

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

CVE-2025-48506

Technical details about CVE-2025-48506 are not publicly available in the provided documents. Monitor for updates from AMD/NVD for affected products, versions, impact, and remediation.

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

PT-2026-70362

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Uncontrolled search paths in the installation path on local Windows machines allow for DLL injection. This occurs when an application searches for a Dynamic Link Library DLL—a shared...

Vitis™ Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43606| Observable Timing Discrepancy in the Vitis™ Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagneti...

FTP Fetch, Reverse All-Port TCP Stager

Fetch and execute an x86 payload from an FTP server. Try to connect back to the attacker, on all possible ports 1-65535, slowly Module Options...

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution...

MAL-2026-4581 Malicious code in idlidosa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6cba2c58d95d705af7dc5bb1c630129127835fb1ef15d4ccf43ec2818bf632 The package is purpose-built tooling to defeat exam-proctoring / lockdown software, with multiple installer-machine integrity harms triggered when th...