0xlane / ppspoofing
Rust编写的父进程PID欺骗技术测试工具
☆49Updated last year
Related projects: ⓘ
- DLL 转发工具方法。☆35Updated 11 months ago
- A SigFlip implement in golang☆34Updated 2 years ago
- 看起来叫BabyBypass，实际啥都会记一些☆16Updated last year
- 不依赖驱动的跨平台抓包工具☆34Updated last year
- CobaltStrike Reflective Dll Source☆19Updated 2 years ago
- 自用的shellcode生成框架☆29Updated last year
- 调用x64dbg中的loadll.exe白加黑示例代码☆59Updated 3 months ago
- power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes☆46Updated 2 years ago
- ReturnGate, just like HellsGate.☆65Updated 2 years ago
- RawCopy - Golang implementation☆20Updated last year
- improved shellcode template for b1tg/rust-windows-shellcode☆26Updated 3 years ago
- ☆22Updated this week
- golang实现的PE解析工具☆14Updated last year
- PPID Spoofing☆15Updated 3 years ago
- 一款利用某云厂商的物联网平台作为c2的框架☆22Updated last year
- desktop screenshot☆29Updated last year
- CS http Dynamic Encrypt Bridge.☆43Updated 2 years ago
- c++ shellcode loader☆38Updated 2 years ago
- Windows Defender VDM lua collections☆44Updated last year
- load assembly executable file in memory☆37Updated last year
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆14Updated last year
- Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs☆26Updated 2 years ago
- Hide Port In Windows☆37Updated last year
- 32 bit process inject shellcode to 32 bit process and 64 bit process☆28Updated last year
- ☆12Updated 3 years ago
- 将PE文件进行AES加密，然后从远程拉取加载内存中实现免杀☆34Updated last year
- ☆20Updated 4 months ago
- 简单安排一下 autochk.sys 这个rootkit☆64Updated last year
- 微软签名缺陷利用，老技术☆18Updated 3 years ago
- Reflective DLL injection Execution☆19Updated 2 years ago