stack spoofing
☆16Nov 15, 2024Updated last year
Alternatives and similar repositories for Fenrir
Users that are interested in Fenrir are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Finding Truth in the Shadows☆126Jan 26, 2023Updated 3 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- A simple proof-of-concept Windows syscall logger using the NT instrumentation callback mechanism.☆36Mar 6, 2026Updated 7 months ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆310Sep 23, 2025Updated last year
- This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.☆310May 23, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- XOR decrypting shellcode using the GPU with OpenCL. Original PoC adopted by e.g. CoffeeLoader, GpuGate.☆131May 22, 2025Updated last year
- ☆19Jul 23, 2023Updated 3 years ago
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆21Jun 29, 2024Updated 2 years ago
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆21Dec 21, 2022Updated 3 years ago
- Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique☆21Dec 3, 2024Updated last year
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆12May 8, 2023Updated 3 years ago
- Windows C++ Implant for Exploration C2☆50Updated this week
- [fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode☆12May 8, 2026Updated 5 months ago
- A debugger which can be used to debug programs that do not want to be debugged☆14Sep 15, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆11Aug 7, 2025Updated last year
- Three different shellcode techniques on the Windows Kernel☆24Apr 8, 2025Updated last year
- ☆27Dec 29, 2021Updated 4 years ago
- A PowerShell script to install TCC on Windows.☆15Mar 4, 2025Updated last year
- NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version☆45Jul 16, 2024Updated 2 years ago
- Examples of Metamorphic and Polymorphic code☆35Jun 5, 2026Updated 4 months ago
- Windows Injection 101: from Zero to ROP (HITCON 2017)☆29Aug 27, 2017Updated 9 years ago
- Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆20Jul 8, 2022Updated 4 years ago
- A runtime for developing large-scale and complex PIC module.☆20Sep 15, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Reflective DLL injection Execution☆19Sep 9, 2022Updated 4 years ago
- Create stealthy, inline, EPT-like hooks using SMAP and SMEP☆69Oct 19, 2024Updated 2 years ago
- Patch AMSI and ETW in remote process via direct syscall☆87Apr 28, 2022Updated 4 years ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆161Jul 15, 2026Updated 3 months ago
- PoC tools of Bytecode Jiu-Jitsu presented at Black Hat USA 2024 Briefings☆24Aug 31, 2025Updated last year
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆63Mar 8, 2023Updated 3 years ago
- Helper functions for calculating the authenticode digest for a portable executable file☆21Apr 30, 2020Updated 6 years ago
- A comprehensive technical guide with an in-depth analysis of the Windows process lifecycle, from initial user-mode API calls through kern…☆38Nov 26, 2025Updated 11 months ago
- This is my implementation of IA32 Call Gates used for ring transitioning. (e.g ring 1 or ring 2)☆17Jan 15, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- It stinks☆100Apr 22, 2022Updated 4 years ago
- My personal shellcode loader☆32Mar 9, 2023Updated 3 years ago
- Takes a Windbg dumped structure (using the 'dt' command) and formats it into a C structure☆40Jul 8, 2024Updated 2 years ago
- ☆28Apr 5, 2026Updated 6 months ago
- DNS-over-HTTP SOCKS5 proxy with blacklist support and privacy-conscious request handling.☆30Feb 28, 2019Updated 7 years ago
- My POC implementation of HVNC (Hidden VNC / Hidden Desktop)☆31Dec 30, 2024Updated last year
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆24Jul 31, 2026Updated 2 months ago