0xBinarySl3uth / Malware_Specimens
This GitHub repository contains benign specimens; however, the techniques demonstrated herein could potentially be exploited for malicious purposes. Exercise discretion and responsibility in their usage. I disclaim any liability for actions resulting from your utilization of this content.
☆16Updated 9 months ago
Alternatives and similar repositories for Malware_Specimens
Users that are interested in Malware_Specimens are comparing it to the libraries listed below
Sorting:
- Malware?☆70Updated 7 months ago
- shell code example☆49Updated this week
- Splitting and executing shellcode across multiple pages☆103Updated last year
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆74Updated 9 months ago
- Implementing the ghostly hollowing PE injection technique using tampered syscalls.☆151Updated 2 months ago
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆83Updated 2 years ago
- Bypass LSA protection using the BYODLL technique☆159Updated 7 months ago
- Construct the payload at runtime using an array of offsets☆63Updated 10 months ago
- IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.☆101Updated last year
- kernel-mode DLL Injector☆74Updated 3 weeks ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- A collection of position independent coding resources☆78Updated 3 months ago
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆42Updated 10 months ago
- Injecting DLL into LSASS at boot☆105Updated 2 weeks ago
- Do some DLL SideLoading magic☆83Updated last year
- ☆151Updated last year
- Red Team Operation's Defense Evasion Technique.☆52Updated 11 months ago
- A bunch of scripts and code i wrote.☆141Updated 6 months ago
- Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects☆95Updated last month
- ☆136Updated last year
- Next gen process injection technique☆53Updated 4 years ago
- ☆61Updated 11 months ago
- Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar☆131Updated 9 months ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆89Updated 11 months ago
- Activation cache poisoning to elevate from medium to high integrity (CVE-2024-6769)☆66Updated 7 months ago
- ☆123Updated last year
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆61Updated last year
- ☆106Updated 4 months ago
- ☆83Updated last year
- Create Anti-Copy DRM Malware☆56Updated 8 months ago