Windows

Projects

spectre rootkit

https://github.com/hfiref0x/TDL

https://github.com/Mattiwatti/EfiGuard

hevd

equ8-poc

dse overrider

Posts

ghost hook

https://www.cyberark.com/resources/threat-research-blog/fantastic-rootkits-and-where-to-find-them-part-1

irp hooking

ssdt hooking

bypassing patchguard

finding bugs in windows drivers

smep

https://blog.nviso.eu/?s=kernel+karnage

https://codemachine.com/articles/kernel_structures.html#EPROCESS

https://www.cyberark.com/resources/threat-research-blog/finding-bugs-in-windows-drivers-part-1-wdm

https://web.archive.org/web/20200510110201/https://fullpwnops.com/windows-exploitation-pathway.html

https://github.com/SecWiki/windows-kernel-exploits

https://github.com/r3p3r/nixawk-awesome-windows-exploitation

https://github.com/leesh3288/WinPwn

https://github.com/FULLSHADE/WindowsExploitationResources

https://github.com/ExpLife0011/awesome-windows-kernel-security-development#qt

https://web.archive.org/web/20171116123128/https://malwaretips.com/threads/av-self-protection-process-c-c.66200/

https://web.archive.org/web/20221216053118/https://www.x86matthew.com/view_post?id=import_dll_injection

https://www.geoffchappell.com/studies/windows/km/index.htm

https://github.com/Octoberfest7/Mutants_Sessions_Self-Deletion

attacking active directory

Awesome

links

LoL

https://www.varonis.com/blog/living-of-the-land-lol-with-microsoft-tools-part-i-intro-to-regsvr

https://www.ired.team/offensive-security/code-execution

lolbas