A library with four different methods to execute shellcode in a process
☆25Mar 24, 2020Updated 6 years ago
Alternatives and similar repositories for StartRoutine
Users that are interested in StartRoutine are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Headers for linking your software with ntdll.dll☆15Nov 4, 2020Updated 5 years ago
- A small utility to run raw code chunks in the executable memory area.☆17Feb 6, 2015Updated 11 years ago
- A simple DLL injection protection driver.☆12Dec 21, 2020Updated 5 years ago
- Windows driver template, using C++20 & cmake & GithubActions☆25Aug 9, 2024Updated 2 years ago
- Loads shellcode from a resource file.☆21Aug 15, 2019Updated 7 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Collection of shellcode injection and execution techniques☆17Mar 17, 2026Updated 7 months ago
- Simple Aggressor Scripts for Cobalt Strike☆13Sep 24, 2020Updated 6 years ago
- A class to gather information about a process, its threads and modules.☆21Mar 23, 2020Updated 6 years ago
- x64 Windows privilege elevation using anycall☆22May 28, 2021Updated 5 years ago
- Kernel-Mode driver and User-Mode application communication project☆12Jun 24, 2018Updated 8 years ago
- ☆15Dec 16, 2020Updated 5 years ago
- A small library to extend the functionality of GetModuleHandle and GetProcAddress to other processes☆16Mar 23, 2020Updated 6 years ago
- a ntdll.h head file which download from network, and fix all found problems by me.☆37Jul 10, 2026Updated 3 months ago
- ☆18Dec 18, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- A collection of Windows Components(Mostly is ntoskrnl.exe)☆31Nov 16, 2020Updated 5 years ago
- ☆10Sep 11, 2026Updated last month
- Public Release☆16Mar 27, 2019Updated 7 years ago
- DioProcess — Advanced Windows Internals, Evasion, Rootkit, Hypervisor, SMM & Bootkit Research Framework☆41Jul 6, 2026Updated 3 months ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- Library for using direct system calls☆35Jan 30, 2025Updated last year
- Native API header files for the Process Hacker project.☆14Mar 1, 2023Updated 3 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Protected Process Light Library☆18Jun 20, 2020Updated 6 years ago
- Thawne is a Sentinel for your Program. A trojan that Reinfects systems. It installs itself on the system it's Executed on. After which Th…☆10Oct 13, 2020Updated 6 years ago
- A fork of https://github.com/SafeBreach-Labs/pinjectra with a practical implementation of Stack Bombing☆14Jan 28, 2020Updated 6 years ago
- Bypasses for Windows kernel callbacks PatchGuard protection☆44Aug 15, 2021Updated 5 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆39Dec 31, 2020Updated 5 years ago
- Position-idependent Windows DLL loader based on ReflectiveDLL project.☆103Nov 5, 2018Updated 7 years ago
- A wrapper class to hide the original calling address of a function☆54Aug 9, 2020Updated 6 years ago
- Runpe + DInvoke + Syscall☆18Jun 18, 2021Updated 5 years ago
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆36Jan 15, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A simple example on how to initiate a direct syscall on WoW64☆11Feb 2, 2018Updated 8 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- Small class to parse debug info from PEs, download their respective PDBs from the Microsoft Public Symbol Server and calculate RVAs of fu…☆45Aug 14, 2026Updated 2 months ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆36Jul 27, 2021Updated 5 years ago
- A quick tool for hiding a new process running shellcode.☆57Jun 10, 2020Updated 6 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆72May 20, 2021Updated 5 years ago
- Helper functions for calculating the authenticode digest for a portable executable file☆21Apr 30, 2020Updated 6 years ago