1M50RRY / runpe-native-loader

Related projects: ⓘ

• TRIKbranch / RunPE-X86--X64-
  With this RunPE you can easily inject your payload in any x86 or x64 program.
  ☆13Updated 5 years ago
• Aekras1a / darkRat_HVNC
  DarkRats Standalone HVNC
  ☆23Updated 2 years ago
• freesoul / netstub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆15Updated 5 years ago
• gigajew / lnksploit
  ☆27Updated this week
• AzAgarampur / byeintegrity-lite
  Bypass UAC by abusing shell protocol handlers
  ☆13Updated 3 years ago
• AzAgarampur / byeintegrity4-uac
  Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers
  ☆16Updated 3 years ago
• NUL0x4C / D-R-Shellcode
  ☆23Updated this week
• 11philip22 / CodeInjection
  Collection of shellcode injection and execution techniques
  ☆17Updated 3 years ago
• NUL0x4C / RecycleBinPersistence
  using the Recycle Bin to insure persistence
  ☆11Updated 2 years ago
• HFaeiro / Lialis
  Rebuild of the original Remote Admin Tool
  ☆9Updated 4 years ago
• Narumiii / phantommap
  Phantom DLL Hollowing method implemented in modmap
  ☆17Updated 3 years ago
• d35ha / PEReflectiveInjection
  Remote PE reflective injection with a simple reflective loader
  ☆28Updated 5 years ago
• cocomelonc / 2022-05-02-malware-pers-3
  Malware persistence via COM DLL hijacking. C++ implementation example
  ☆12Updated 2 years ago
• H4xl0r / Necro-Stealer
  ☣️ Necro Stealer + Web Panel
  ☆10Updated 4 years ago
• arsium / BypassGetModuleBaseAddressAndGetExportAddress
  A proof of concept of real custom GetProcAddress and GetModuleBaseAddress
  ☆19Updated 2 years ago
• nattyr / Crypt
  POC runtime crypter
  ☆8Updated 5 years ago
• PorLaCola25 / NtCreateUserProcess
  ☆12Updated 3 years ago
• d35ha / RunPE
  An example of PE hollowing injection technique
  ☆23Updated 5 years ago
• gigajew / FudCrypt
  ☆15Updated this week
• ORCx41 / DynamicDllLoader
  ☆11Updated this week
• AchocolatechipPancake / _x64_Loader
  Utilizing Alternative Shellcode Execution Via Callbacks
  ☆12Updated 9 months ago
• Archx0Mas / Dropper-shellcode-into-explorer.exe
  A dropper that decrypts encrypted xor payload and can inject it in explorer.exe proccess
  ☆8Updated 3 years ago
• AzAgarampur / byeintegrity5-uac
  Bypass UAC at any level by abusing the Task Scheduler and environment variables
  ☆26Updated 3 years ago
• Mantraufo / Kanoninjector
  Runpe + DInvoke + Syscall
  ☆16Updated 3 years ago
• cocomelonc / 2022-01-14-malware-injection-13
  Code injection via ZwCreateSection, ZwUnmapViewOfSection. C++ example
  ☆17Updated 2 years ago
• HFaeiro / Remote-Admin-Tool
  Simple remote administration tool. Written in c++ and MASM.
  ☆18Updated 6 years ago
• avarenina / Windows-PE-Injection
  PE Injection with ring3 hook bypass
  ☆10Updated 3 years ago
• basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender
  ☆11Updated 5 years ago
• Souhardya / ChimeraLdr
  Multipurpose malware framework
  ☆21Updated 2 years ago
• GetRektBoy724 / Breaking-Detecting-Direct-Syscall-Techniques
  A repository filled with ideas to break/detect direct syscall techniques
  ☆26Updated 2 years ago