ChaitanyaHaritash / Callback_Shellcode_Injection
POCs for Shellcode Injection via Callbacks
☆399Updated 3 years ago
Alternatives and similar repositories for Callback_Shellcode_Injection:
Users that are interested in Callback_Shellcode_Injection are comparing it to the libraries listed below
- X86 version of syswhispers2 / x86 direct system call☆322Updated 4 years ago
- Collection of Beacon Object Files☆567Updated 2 years ago
- laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.☆467Updated 2 years ago
- InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…☆636Updated last year
- A little tool to play with the Seclogon service☆311Updated 2 years ago
- x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks☆200Updated last year
- C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can…☆507Updated 3 years ago
- A .NET Runtime for Cobalt Strike's Beacon Object Files☆694Updated 4 months ago
- GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisp…☆307Updated 4 months ago
- Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS head…☆550Updated 3 years ago
- A Visual Studio template used to create Cobalt Strike BOFs☆289Updated 3 years ago
- A protective and Low Level Shellcode Loader that defeats modern EDR systems.☆898Updated 10 months ago
- Misc TaskScheduler Plays☆228Updated 2 years ago
- Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…☆446Updated last year
- not a reverse-engineered version of the Cobalt Strike Beacon☆343Updated 9 months ago
- UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …☆345Updated 2 years ago
- PIC lsass dumper using cloned handles☆579Updated 2 years ago
- EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…☆271Updated last year
- Some Service DCOM Object and SeImpersonatePrivilege abuse.☆354Updated 2 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆901Updated 7 months ago
- An implementation and proof-of-concept of Process Forking.☆222Updated 3 years ago
- Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windo…☆223Updated 10 months ago
- A Nim implementation of reflective PE-Loading from memory☆274Updated 4 months ago
- Beacon Object File (BOF) Creation Helper☆224Updated 2 years ago
- Evasive shellcode loader for bypassing event-based injection detection (PoC)☆745Updated 3 years ago
- TartarusGate, Bypassing EDRs☆560Updated 3 years ago
- C# Reflective loader for unmanaged binaries.☆423Updated 2 years ago
- ☆490Updated 2 months ago
- KaynLdr is a Reflective Loader written in C/ASM☆527Updated last year
- Yet another shellcode runner consists of different techniques for evaluating detection capabilities of endpoint security solutions☆480Updated 3 years ago