stack spoofing
☆15Nov 15, 2024Updated last year
Alternatives and similar repositories for Fenrir
Users that are interested in Fenrir are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆268Sep 23, 2025Updated 10 months ago
- This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.☆303May 23, 2026Updated 2 months ago
- A simple proof-of-concept Windows syscall logger using the NT instrumentation callback mechanism.☆35Mar 6, 2026Updated 5 months ago
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆21Dec 21, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Read ETW Provider events. Inspired by ETWExplorer by Pavel Yosifovich☆21Jun 29, 2024Updated 2 years ago
- Windows C++ Implant for Exploration C2☆50May 11, 2026Updated 2 months ago
- Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique☆21Dec 3, 2024Updated last year
- Finding Truth in the Shadows☆128Jan 26, 2023Updated 3 years ago
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆18Jul 31, 2026Updated last week
- ☆27Dec 29, 2021Updated 4 years ago
- Patch AMSI and ETW in remote process via direct syscall☆83Apr 28, 2022Updated 4 years ago
- XOR decrypting shellcode using the GPU with OpenCL. Original PoC adopted by e.g. CoffeeLoader, GpuGate.☆125May 22, 2025Updated last year
- Examples of Metamorphic and Polymorphic code☆36Jun 5, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- NtCreateUserProcess with CsrClientCallServer for mainstream Windows x64 version☆45Jul 16, 2024Updated 2 years ago
- Reflective DLL injection Execution☆19Sep 9, 2022Updated 3 years ago
- Windows Injection 101: from Zero to ROP (HITCON 2017)☆29Aug 27, 2017Updated 8 years ago
- [fork] Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode☆15May 8, 2026Updated 3 months ago
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆65Mar 8, 2023Updated 3 years ago
- A runtime for developing large-scale and complex shellcode.☆21Updated this week
- PoC tools of Bytecode Jiu-Jitsu presented at Black Hat USA 2024 Briefings☆24Aug 31, 2025Updated 11 months ago
- My personal shellcode loader☆32Mar 9, 2023Updated 3 years ago
- Helper functions for calculating the authenticode digest for a portable executable file☆20Apr 30, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This is my implementation of IA32 Call Gates used for ring transitioning. (e.g ring 1 or ring 2)☆17Jan 15, 2019Updated 7 years ago
- Related to my article @ https://helz.dev/blog/breaking-claude-code/☆16Mar 26, 2026Updated 4 months ago
- ☆59Jan 9, 2023Updated 3 years ago
- Virtual Trust Level (VTL 1) secure call tracing☆104Jul 19, 2026Updated 3 weeks ago
- Proof-of-concept game using VBS enclaves to protect itself from cheating☆73Nov 10, 2024Updated last year
- a stage1 DLL loader with sleep obfuscation☆36Dec 27, 2022Updated 3 years ago
- This script is used to unload PsSetCreateProcessNotifyRoutineEx, PsSetCreateProcessNotifyRoutine, PsSetLoadImageNotifyRoutine and PsSetCr…☆63Feb 11, 2024Updated 2 years ago
- My POC implementation of HVNC (Hidden VNC / Hidden Desktop)☆30Dec 30, 2024Updated last year
- All my POC related to malware development☆15Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- DNS-over-HTTP SOCKS5 proxy with blacklist support and privacy-conscious request handling.☆30Feb 28, 2019Updated 7 years ago
- PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)☆109May 27, 2021Updated 5 years ago
- It stinks☆101Apr 22, 2022Updated 4 years ago
- ☆29Apr 5, 2026Updated 4 months ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated 11 months ago
- LLVM Pass to save Reverse Engineers from Automation☆128Jun 9, 2026Updated 2 months ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year