Use NT Native Registry API to create a registry that normal user can not query.
☆92Dec 7, 2017Updated 8 years ago
Alternatives and similar repositories for HiddenNtRegistry
Users that are interested in HiddenNtRegistry are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dll injection through code page id modification in registry. Based on jonas lykk research☆16Jun 18, 2022Updated 4 years ago
- A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.☆31Feb 7, 2025Updated last year
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year
- TypeLib persistence technique☆151Oct 22, 2024Updated 2 years ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆116Feb 25, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …☆337Mar 6, 2025Updated last year
- Shellcode Loader Utilizing ETW Events☆66Feb 26, 2025Updated last year
- An example reference design for a proposed BOF PE☆251Jan 23, 2026Updated 9 months ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 3 months ago
- Terms of Use Conditional Access M365 Evilginx Phishlet☆47Jun 23, 2025Updated last year
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Submission, compilation and execution of C# code snippets, using an unmanaged CLR Host☆58Jan 29, 2015Updated 11 years ago
- A tool to modify SCCM remote control settings on the client machine, enabling remote control without permission prompts or notifications.…☆121Oct 20, 2024Updated 2 years ago
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- "Service-less" driver loading☆192Nov 28, 2024Updated last year
- Shellcode loader that executes embedded Lua from Rust.☆125Dec 16, 2024Updated last year
- A Mythic Agent written in PIC C.☆215Feb 4, 2025Updated last year
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆80Dec 23, 2023Updated 2 years ago
- A simple BOF (Beacon Object File) to search files in the system☆20Dec 2, 2023Updated 2 years ago
- A set of programs for analyzing common vulnerabilities in COM☆266Sep 8, 2024Updated 2 years ago
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- early cascade injection PoC based on Outflanks blog post, in rust☆64Nov 8, 2024Updated last year
- ☆127Dec 12, 2025Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆219Feb 6, 2025Updated last year
- Host CLR and run .NET binaries using Rust☆156Dec 23, 2025Updated 10 months ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆75Nov 11, 2025Updated 11 months ago
- A workshop about core UDRL mechanics by Joris Ignoul & Mickey De Baets☆23Jun 12, 2026Updated 4 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆50Dec 4, 2023Updated 2 years ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆142Aug 31, 2025Updated last year
- Reverse engineering winapi function loadlibrary.☆248Apr 17, 2023Updated 3 years ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Toolset to manipulate RPC clients by finding delayed services and masquerading as them☆113Oct 5, 2026Updated last month
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆193Jan 17, 2026Updated 9 months ago
- .NET assembly loader with patchless AMSI and ETW bypass☆393Apr 19, 2023Updated 3 years ago
- ☆22Jun 24, 2025Updated last year
- A quick example of the Hells Gate technique in Nim☆92Aug 11, 2021Updated 5 years ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆67Mar 19, 2024Updated 2 years ago
- .NET CLR-Stomping☆148May 20, 2026Updated 5 months ago