Gabriel Landau

PPLFault. C

EDRSandblast-GodFault. EDRSandblast-GodFault

ItsNotASecurityBoundary. C

ShadowStackWalk. Finding Truth in the Shadows

Redux. C

CISpotter. Code Integrity Violation Spotter

ANGRYORCHARD. A kernel exploit leveraging NtUserHardErrorControl to elevate a thread to KernelMode and achieve arbitrary kernel R/W & more.

ExtendedAttributeIpecac. Kernel EA Ipecac

OffensivePH. OffensivePH - use old Process Hacker driver to bypass several user-mode access controls

EDRSandblast. C

PPLmedic. Dump the memory of any PPL with a Userland exploit chain

grimreaper. A improved memory obfuscation primitive using a combination of special and 'normal' Asynchronous Procedural Calls

BlogExamples. C++