Rex Shellcode Loader for AV/EDR evasion
☆36Apr 7, 2024Updated 2 years ago
Alternatives and similar repositories for RexLdr
Users that are interested in RexLdr are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- Async BOF to monitor and detect clipboard changes on a target system and return the clipboard contents.☆22Jul 23, 2026Updated 3 months ago
- Header-only compile-time string obfuscation for C++, hiding literals from static analysis and reacting to debuggers at runtime.☆15Updated this week
- BloodyAv is Custom Shell Code loader to Bypass Av and Edr.☆16Mar 21, 2022Updated 4 years ago
- Probably the easiest way to setup new beacon notifications in Cobalt Strike☆10Jan 7, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Patched golang with Windows 7 support☆11Nov 25, 2025Updated 11 months ago
- (WIP) A Recursive UDRL leveraging smelly_vx's Feverdream trick.☆19Sep 3, 2025Updated last year
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"☆31Jan 14, 2023Updated 3 years ago
- Transparently call NTAPI via Halo's Gate with indirect syscalls.☆13Apr 26, 2024Updated 2 years ago
- Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell onto webserver☆13Dec 27, 2023Updated 2 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- EDR/AV Simulation for Malware Development☆12Oct 21, 2023Updated 3 years ago
- NTAPI hook bypass with (semi) legit stack trace☆18May 9, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆63Apr 4, 2024Updated 2 years ago
- Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…☆189Aug 2, 2023Updated 3 years ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- 红队/渗透测试的工具和技术集，项目/A-poc/RedTeam-Tools 中文译版☆15Jan 3, 2023Updated 3 years ago
- An example UDC2 implementation for CrystalC2.☆19Jun 19, 2026Updated 4 months ago
- Find DLLs with RWX section☆81Jul 3, 2023Updated 3 years ago
- 个人学习使用，二开DcRAT，主要是增加了功能性插件☆16Jan 26, 2024Updated 2 years ago
- Indirect Syscall invocation via thread hijacking☆27May 5, 2023Updated 3 years ago
- 二维码钓鱼☆43Aug 24, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Indirect NT syscalls LSASS dumper.☆47Jul 9, 2023Updated 3 years ago
- Mockingjay Process Injection Vulnerable DLL Finder☆21Jun 30, 2023Updated 3 years ago
- AV bypass while you sip your Chai!☆223May 17, 2024Updated 2 years ago
- AV/EDR killer using BYOVD technique☆44Sep 27, 2024Updated 2 years ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆69Apr 2, 2025Updated last year
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆47Oct 11, 2025Updated last year
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated 2 years ago
- A new technique that can be used to bypass memory scanners. This can be useful in hiding problematic code (such as reflective loaders imp…☆359Oct 7, 2024Updated 2 years ago
- Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.☆57Oct 11, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Service Extender for notifying about AdaptixC2 events in Telegram, Slack, Rocket.Char, Discord, and any web platforms, such as ntfy.sh.☆22Mar 4, 2026Updated 8 months ago
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 7 months ago
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- a short C code POC to gain persistence and evade sysmon event code registry (creation, update and deletion) REG_NOTIFY_CLASS Registry Cal…☆66Aug 23, 2023Updated 3 years ago
- Remote process shellcode injection with interactive output via named pipes☆52Jan 10, 2024Updated 2 years ago
- Mockingjay process self injection POC☆53Aug 8, 2023Updated 3 years ago
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆43Dec 1, 2025Updated 11 months ago