stack spoofing
☆15Nov 15, 2024Updated last year
Alternatives and similar repositories for Fenrir
Users that are interested in Fenrir are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆21Jun 29, 2024Updated 2 years ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆268Sep 23, 2025Updated 9 months ago
- This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.☆301May 23, 2026Updated last month
- A simple proof-of-concept Windows syscall logger using the NT instrumentation callback mechanism.☆35Mar 6, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Windows C++ Implant for Exploration C2☆49May 11, 2026Updated 2 months ago
- A PowerShell script to install TCC on Windows.☆14Mar 4, 2025Updated last year
- Finding Truth in the Shadows☆128Jan 26, 2023Updated 3 years ago
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆18Updated this week
- ☆27Dec 29, 2021Updated 4 years ago
- Patch AMSI and ETW in remote process via direct syscall☆84Apr 28, 2022Updated 4 years ago
- XOR decrypting shellcode using the GPU with OpenCL. Original PoC adopted by e.g. CoffeeLoader, GpuGate.☆126May 22, 2025Updated last year
- Examples of Metamorphic and Polymorphic code☆36Jun 5, 2026Updated last month
- Reflective DLL injection Execution☆19Sep 9, 2022Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Windows Injection 101: from Zero to ROP (HITCON 2017)☆29Aug 27, 2017Updated 8 years ago
- This is my implementation of IA32 Call Gates used for ring transitioning. (e.g ring 1 or ring 2)☆17Jan 15, 2019Updated 7 years ago
- [fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode☆15May 8, 2026Updated 2 months ago
- Just a git repo for the sleepmask detection rule i found in https://codex-7.gitbook.io/codexs-terminal-window/blue-team/detecting-cobalt-…☆16Jun 4, 2025Updated last year
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆65Mar 8, 2023Updated 3 years ago
- My personal shellcode loader☆32Mar 9, 2023Updated 3 years ago
- PoC tools of Bytecode Jiu-Jitsu presented at Black Hat USA 2024 Briefings☆24Aug 31, 2025Updated 10 months ago
- Helper functions for calculating the authenticode digest for a portable executable file☆20Apr 30, 2020Updated 6 years ago
- Related to my article @ https://helz.dev/blog/breaking-claude-code/☆16Mar 26, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Virtual Trust Level (VTL 1) secure call tracing☆102Updated this week
- ☆60Jan 9, 2023Updated 3 years ago
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆63Feb 11, 2024Updated 2 years ago
- a stage1 DLL loader with sleep obfuscation☆36Dec 27, 2022Updated 3 years ago
- All my POC related to malware development☆15Feb 19, 2026Updated 5 months ago
- DNS-over-HTTP SOCKS5 proxy with blacklist support and privacy-conscious request handling.☆30Feb 28, 2019Updated 7 years ago
- AIDA64DRIVER Elevation of Privilege Vulnerability☆17Oct 25, 2024Updated last year
- IDA loader for Apple SecureROM☆13Sep 29, 2019Updated 6 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆109May 27, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- It stinks☆101Apr 22, 2022Updated 4 years ago
- This exploit is utilising AddressOfEntryPoint of process which is RX and using WriteProcessMemory internal magic to change the permission…☆20Oct 31, 2024Updated last year
- ☆27Apr 5, 2026Updated 3 months ago
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated 10 months ago
- Abusing RtlAdjustPrivilege and NtSetInformationProcess to cause a BSOD from usermode☆19Sep 1, 2022Updated 3 years ago
- Rewrite and obfuscate code in compiled binaries☆275Dec 13, 2025Updated 7 months ago