Reflective DLL loader.
☆26Jun 30, 2026Updated 3 months ago
Alternatives and similar repositories for ShdwLdr
Users that are interested in ShdwLdr are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆52Jun 28, 2026Updated 3 months ago
- KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.☆240Sep 15, 2026Updated 2 weeks ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆60Jul 4, 2026Updated 2 months ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆114Jul 14, 2026Updated 2 months ago
- A simple C2 Framework written in modern C++☆33Jul 2, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 3 months ago
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆59Mar 22, 2026Updated 6 months ago
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 3 months ago
- Language extension for Crystal Palace Specification files☆14Jun 6, 2026Updated 3 months ago
- A POC tool for exploring dev-tunnels☆73May 5, 2026Updated 4 months ago
- DCOM in memory and fileless lateral movement techniques through .Net deserilization☆293Jun 22, 2026Updated 3 months ago
- Stealth Windows keylogger.☆58Jan 11, 2026Updated 8 months ago
- ☆70Jul 12, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆102Jul 1, 2026Updated 3 months ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 2 months ago
- multi layer encryption for payloads with options of delivery welcome to the Tenebris side☆27May 9, 2026Updated 4 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 2 months ago
- A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more☆96Jun 24, 2026Updated 3 months ago
- Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR…☆113Aug 8, 2026Updated last month
- ☆18Dec 11, 2025Updated 9 months ago
- a minimal, position-independent C shellcode framework for Windows x64. compiles entirely on Linux☆66Aug 1, 2026Updated 2 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆28Jul 23, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆35Mar 28, 2026Updated 6 months ago
- A Crystal Palace shared library to resolve & perform syscalls☆66Oct 29, 2025Updated 11 months ago
- EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies☆49Jun 8, 2026Updated 3 months ago
- Early cascade injection PoC based on Outflanks blog post written in Rust☆67Dec 26, 2025Updated 9 months ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Jan 6, 2024Updated 2 years ago
- A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.☆31Feb 7, 2025Updated last year
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆63May 4, 2026Updated 4 months ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year
- load shellcode without P/D Invoke and VirtualProtect call.☆170Sep 2, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.☆196May 23, 2026Updated 4 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆65Jul 12, 2026Updated 2 months ago
- Phantom is project created to perform loading and executing unmanaged code in memory within an IIS environment running in full‑trust mode…☆107Jun 5, 2026Updated 3 months ago
- Arsenal of modules to beacon postex☆105Mar 13, 2026Updated 6 months ago
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 3 months ago
- Evasive loader for .NET Framework assemblies☆51May 14, 2026Updated 4 months ago
- Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET☆51May 5, 2025Updated last year