0xcf80 / ShellCodeLoader_Indirect_Syscalls

Related projects ⓘ

Alternatives and complementary repositories for ShellCodeLoader_Indirect_Syscalls

• ZephrFish / DynamicMSBuilder
  A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation
  ☆31Updated 7 months ago
• jsecu / ElevatedEvents
  ☆29Updated 2 years ago
• ShorSec / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆19Updated last year
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆30Updated 3 months ago
• Orange-Cyberdefense / EDRSnowblast
  This project is an EDRSandblast fork, adding some features and custom pieces of code.
  ☆21Updated last year
• yamakadi / ldr
  A work in progress BOF/COFF loader in Rust
  ☆45Updated last year
• MaorSabag / fileSearcher
  A simple BOF (Beacon Object File) to search files in the system
  ☆11Updated 11 months ago
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆39Updated 11 months ago
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆20Updated last year
• Quack2332 / Simple-.NET-Obfuscator-PoC
  ☆19Updated 5 months ago
• wolfcod / beacondbg
  Beacon Debugger
  ☆35Updated 3 weeks ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆51Updated last year
• EspressoCake / ReadRemoteProcessCommandline_BOF
  ☆22Updated 6 months ago
• Allevon412 / SyscallTempering
  ☆26Updated 3 months ago
• dis0rder0x00 / ParentProcessManipulation-LNK
  Using LNK files and user input simulation to start processes under explorer.exe
  ☆23Updated 2 months ago
• Hagrid29 / BOF-CredUI
  Cobalt Strike Beacon Object File (BOF) that uses CredUIPromptForWindowsCredentials API to invoke credential prompt
  ☆18Updated last year
• Wh04m1001 / PICDumper
  ☆24Updated 2 years ago
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆29Updated last year
• zimnyaa / smbsocks
  A simple rpc2socks alternative in pure Go.
  ☆24Updated 4 months ago
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆34Updated last year
• EspressoCake / BetterPipename
  Example of using Sleep to create better named pipes.
  ☆41Updated last year
• NtDallas / Fenrir
  stack spoofing
  ☆53Updated this week
• mobdk / WinSpoof
  Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code
  ☆21Updated last year
• EvanMcBroom / fuse-loader
  Load a dynamic library from memory using a fuse mount
  ☆29Updated last year
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆39Updated 2 months ago
• EspressoCake / DefenderPathExclusions
  Creation and removal of Defender path exclusions and exceptions in C#.
  ☆30Updated last year
• thiagomayllart / DarkMelkor
  Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.
  ☆27Updated 3 years ago