IAT Unhooking proof-of-concept
☆33Apr 7, 2024Updated 2 years ago
Alternatives and similar repositories for IATUnhooker
Users that are interested in IATUnhooker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Malicious powershell scripts loader designed to avoid detection.☆64Jun 16, 2023Updated 3 years ago
- Repository to gather the BOF files I will be developing☆12Oct 1, 2024Updated 2 years ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆40Jul 12, 2024Updated 2 years ago
- Generate FUD backdoors☆264Mar 17, 2023Updated 3 years ago
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Reflective shellcode runners using obfuscated Win32 APIs in C# and C++ (GetProcAddress & GetModuleHandle). For penetration testing.☆16Jul 17, 2025Updated last year
- Proxy function calls through the thread pool with ease☆31Feb 27, 2025Updated last year
- A linux kernel funtions hooking module☆10May 2, 2022Updated 4 years ago
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated 2 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- Cobalt Strike notifications via NTFY.☆15Sep 24, 2024Updated 2 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- Vulnerable (on purpose) programs to leak NtReadVirtualMemory address for stealthier API resolution (no GetProcAddress, GetModuleHandle or…☆42Dec 22, 2025Updated 10 months ago
- ☆12May 27, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A multi web security purposes tool☆47May 29, 2026Updated 5 months ago
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- AV bypass while you sip your Chai!☆223May 17, 2024Updated 2 years ago
- A kernel driver to get a Handle to virtually *every* process☆15Jan 16, 2024Updated 2 years ago
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆184Feb 2, 2026Updated 8 months ago
- ☆11Feb 12, 2023Updated 3 years ago
- Bypass AMSI☆13Apr 9, 2024Updated 2 years ago
- Some of my custom "tools".☆28Feb 21, 2022Updated 4 years ago
- The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.☆29Mar 9, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- DefCon Red Team Village 2023 Workshop on DLL Sideloading☆18Aug 15, 2023Updated 3 years ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆51Jul 29, 2024Updated 2 years ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆87Jun 24, 2022Updated 4 years ago
- Manually perform syscalls without going through any external API or DLL.☆18Apr 19, 2023Updated 3 years ago
- Basic network sec tool for real-time threat detection and C2 communication prevention. Features 70+ detection modules, IOC integration, c…☆17Jun 11, 2024Updated 2 years ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Nov 17, 2019Updated 6 years ago
- ☆211Nov 28, 2023Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆146Dec 16, 2023Updated 2 years ago
- ☆31Aug 23, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Process hollowing injection technique for Red Team operations☆19Sep 18, 2023Updated 3 years ago
- Ransoblin (Ransomware Bokoblin)☆18Oct 4, 2020Updated 6 years ago
- An example of using Syscalls in C# to get a meterpreter shell.☆113Oct 7, 2021Updated 5 years ago
- Compiled Binaries for Sharp Suite☆15Dec 28, 2019Updated 6 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆38May 3, 2021Updated 5 years ago
- DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable☆66Apr 4, 2026Updated 6 months ago
- A basic exemple of the API-Hashing method used by Red Teamers but also by malwares developers in C++☆36Jan 10, 2024Updated 2 years ago