Allevon412 / BreadManModuleStompingLinks
☆44Updated 2 years ago
Alternatives and similar repositories for BreadManModuleStomping
Users that are interested in BreadManModuleStomping are comparing it to the libraries listed below
Sorting:
- Beacon Object Files (not Buffer Overflows)☆57Updated 2 years ago
- ☆31Updated 3 years ago
- Windows x64 Process Injection via Ghostwriting with Dynamic Configuration☆29Updated 4 years ago
- Example of using Sleep to create better named pipes.☆41Updated 2 years ago
- A VSCode plugin to assist with BOF development.☆37Updated last year
- DLL Exports Extraction BOF with optional NTFS transactions.☆84Updated 4 years ago
- all credits go to @mgeeky☆64Updated 4 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- Syscall BOF to arbitrarily add/detract process token privilege rights.☆61Updated last year
- A work in progress BOF/COFF loader in Rust☆51Updated 2 years ago
- One gate to all syscalls!☆23Updated 3 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆37Updated 4 years ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆23Updated 2 years ago
- A care package of useful bofs for red team engagments☆55Updated last year
- Sleep Obfuscation☆45Updated 3 years ago
- A method to execute shellcode using RegisterWaitForInputIdle API.☆55Updated 2 years ago
- idk man this was the default github name☆35Updated 2 years ago
- Dump Teams conversations☆19Updated 4 years ago
- ☆22Updated 3 years ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆31Updated last year
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆28Updated 4 years ago
- Halos Gate-based NTAPI Unhooker☆52Updated 3 years ago
- My implementation of Halo's Gate technique in C#☆54Updated 3 years ago
- miscellaneous codes☆36Updated 2 years ago
- Click Once + App Domain☆64Updated 2 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆36Updated 3 years ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Updated 2 years ago
- Load a dynamic library from memory using a fuse mount☆31Updated 2 years ago
- Beacon Object File implementation of Yaxser's Backstab☆15Updated 3 years ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆91Updated 3 years ago