0xTriboulet / T-1
T-1 is a shellcode loader that leverages ML techniques to detect VM environments
☆23Updated 3 months ago
Alternatives and similar repositories for T-1:
Users that are interested in T-1 are comparing it to the libraries listed below
- Section-based payload obfuscation technique for x64☆59Updated 5 months ago
- Windows Thread Pool Injection Havoc Implementation☆28Updated 10 months ago
- Just another ntdll unhooking using Parun's Fart technique☆73Updated last year
- ☆48Updated 3 months ago
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆41Updated 6 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Updated 6 months ago
- Construct the payload at runtime using an array of offsets☆61Updated 7 months ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆46Updated 8 months ago
- FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…☆13Updated 2 weeks ago
- API Hammering with C++20☆44Updated 2 years ago
- This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…☆70Updated 11 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆38Updated last year
- ☆47Updated last year
- Classic Process Injection with Memory Evasion Techniques implemantation☆66Updated last year
- BOF for C2 framework☆39Updated 2 months ago
- A collection of position independent coding resources☆64Updated last week
- Hunting and injecting RWX 'mockingjay' DLLs in pure nim☆53Updated last month
- A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust☆83Updated 9 months ago
- Mythic C2 Agent written in x64 PIC C☆65Updated this week
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆73Updated 5 months ago
- Rewrite to fit my needs☆27Updated 6 months ago
- LKM rootkit for modern kernels, with DNS C2 and a simple web interface☆63Updated last week
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆56Updated last year
- ☆83Updated 5 months ago
- malleable profile generator GUI for Havoc☆56Updated last year
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆42Updated 10 months ago
- early cascade injection PoC based on Outflanks blog post, in rust☆50Updated 2 months ago
- These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be…☆19Updated last year
- ☆36Updated last year