Popular repositories

1. TangledWinExec TangledWinExec Public

   PoCs and tools for investigation of Windows process execution techniques

   C# 851 133

2. PrivFu PrivFu Public

   Kernel mode WinDbg extension and PoCs for token privilege investigation.

   C# 675 106

3. AtomicSyscall AtomicSyscall Public

   Tools and PoCs for Windows syscall investigation.

   C# 344 49

4. VectorKernel VectorKernel Public

   PoCs for Kernelmode rootkit techniques research.

   C# 288 39

5. SharpWnfSuite SharpWnfSuite Public

   C# Utilities for Windows Notification Facility

   C# 123 25

6. Abusing_Weak_ACL_on_Certificate_Templates Abusing_Weak_ACL_on_Certificate_Templates Public

   Investigation about ACL abusing for Active Directory Certificate Services (AD CS)

   118 17