Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.
Like projectmerai/DLLHijackHunter, 0 likes 0 Bookmark projectmerai/DLLHijackHunter, 0 bookmarks 0 Project for tracking publicly disclosed DLL Hijacking opportunities.
Like wietze/HijackLibs, 0 likes 0 Bookmark wietze/HijackLibs, 0 bookmarks 0 A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.
Like dazzyddos/PrivHound, 0 likes 0 Bookmark dazzyddos/PrivHound, 0 bookmarks 0 Activation Context Hijacking Evasion Tool
Like r3xmax/PhantomCtx, 0 likes 0 Bookmark r3xmax/PhantomCtx, 0 bookmarks 0 goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level (with MITRE ATT&CK mappings) and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches.
Like ripits-sec/goLoL, 0 likes 0 Bookmark ripits-sec/goLoL, 0 bookmarks 0 The essential toolkit for reversing, malware analysis, and cracking
Like indetectables-net/toolkit, 0 likes 0 Bookmark indetectables-net/toolkit, 0 bookmarks 0 Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler
Like ZakiPedio/GadgetSniper, 0 likes 0 Bookmark ZakiPedio/GadgetSniper, 0 bookmarks 0 Curated Linux LPE corpus — 28 modules from 2016 to 2026, with detection rules. One command, safest-first root: skeletonkey --auto --i-know
Like KaraZajac/SKELETONKEY, 0 likes 0 Bookmark KaraZajac/SKELETONKEY, 0 bookmarks 0 Kernel mode WinDbg extension and PoCs for token privilege investigation.
Like daem0nc0re/PrivFu, 0 likes 0 Bookmark daem0nc0re/PrivFu, 0 bookmarks 0 
