A Simple PoC
☆22May 24, 2024Updated 2 years ago
Alternatives and similar repositories for ThreadlessSpawn
Users that are interested in ThreadlessSpawn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆10Apr 26, 2024Updated 2 years ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Rust 重构的 sRDI☆18Sep 9, 2024Updated 2 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆108Jan 3, 2021Updated 5 years ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Cobalt Strike UDRL for memory scanner evasion.☆50Dec 4, 2023Updated 2 years ago
- beta☆119Sep 24, 2024Updated 2 years ago
- ☆15Feb 9, 2022Updated 4 years ago
- A runtime for developing large-scale and complex PIC module.☆20Sep 15, 2026Updated last month
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆80Dec 23, 2023Updated 2 years ago
- Zero EAT touch way to retrieve function addresses (GetProcAddress on steroids)☆147Mar 16, 2024Updated 2 years ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆56May 12, 2025Updated last year
- A simple BOF (Beacon Object File) to search files in the system☆20Dec 2, 2023Updated 2 years ago
- UAC Bypass via CMUACUtil & PEB Enumeration, Undetected for now.☆53May 8, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆74Mar 6, 2024Updated 2 years ago
- A command and control framework.☆54Dec 26, 2024Updated last year
- ☆29May 10, 2024Updated 2 years ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released a…☆400Jan 9, 2024Updated 2 years ago
- This project is created for research into antivirus evasion by unhooking.☆17Sep 2, 2021Updated 5 years ago
- Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution☆203May 29, 2025Updated last year
- A basic exemple of the API-Hashing method used by Red Teamers but also by malwares developers in C++☆36Jan 10, 2024Updated 2 years ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆42Apr 6, 2026Updated 6 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Abusing Some Defects in KSLD Ark driver☆40May 30, 2026Updated 4 months ago
- Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode☆208May 28, 2024Updated 2 years ago
- 看雪 LLVM与代码混淆技术 笔记☆22Aug 31, 2023Updated 3 years ago
- Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.☆71Jul 29, 2023Updated 3 years ago
- A tool that bypasses Windows Defender by manually loading DLLs, parsing EAT directly, and updating IAT with unhooked functions to run M…☆21Jul 14, 2024Updated 2 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆163Oct 27, 2024Updated 2 years ago
- Shadow Rebirth - An Aggressive Outbreak Anti-Debugging Technique☆21Dec 3, 2024Updated last year
- CobaltStrike beacon in rust☆210Aug 10, 2024Updated 2 years ago
- Evasive shellcode loader for Red Teaming☆20Aug 15, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 7 months ago
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- Sliver agent rewritten in C++☆49Sep 4, 2024Updated 2 years ago
- A BOF that runs unmanaged PEs inline☆703Oct 23, 2024Updated 2 years ago
- 重构Beacon☆165Aug 19, 2024Updated 2 years ago
- EventViewer Bypass Uac Bof☆22Jul 23, 2022Updated 4 years ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago