VirtualAlllocEx / DSC_SVC_REMOTE

This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service path, etc. The payload itself can be remotely hosted, downloaded via the wininet library and then executed via direct system calls.

Date Created 2023-05-08 (about a year ago)

Commits 12 (last one about a year ago)

Stargazers 50 (0 this week)

Watchers 2 (0 this week)

Forks 10

License unknown

Ranking

RepositoryStats indexes 589,134 repositories, of these VirtualAlllocEx/DSC_SVC_REMOTE is ranked #465,292 (21st percentile) for total stargazers, and #481,361 for total watchers. Github reports the primary language for this repository as C, for repositories using this language it is ranked #18,356/21,998.

All Topics

av-bypass av-evasion edr-bypass edr-evasion direct-syscalls

Star History

Github stargazers over time

Watcher History

Github watchers over time, collection started in '23

Recent Commit History

12 commits on the default branch (main) since jan '22

Yearly Commits

Commits to the default branch (main) per year

Issue History

No issues have been posted

Languages

The primary language is C but there's also others...

updated: 2024-09-04 @ 04:59pm, id: 637863393 / R_kgDOJgUF4Q