Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post
☆102Oct 13, 2022Updated 4 years ago
Alternatives and similar repositories for OneDriveUpdaterSideloading
Users that are interested in OneDriveUpdaterSideloading are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆57Oct 10, 2022Updated 4 years ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆87Jun 24, 2022Updated 4 years ago
- Weaponized HellsGate/SigFlip☆204Jun 7, 2023Updated 3 years ago
- .net config loader☆355Nov 9, 2023Updated 2 years ago
- ☆80Feb 12, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆11Jul 2, 2025Updated last year
- ☆323Jun 28, 2023Updated 3 years ago
- ShellWasp is a tool to help build shellcode that utilizes Windows syscalls, while overcoming the portability problem associated with Wind…☆177Aug 5, 2026Updated 2 months ago
- ☆207Feb 24, 2022Updated 4 years ago
- DLL sideloading/proxying with Nim!☆174Dec 4, 2022Updated 3 years ago
- Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking.☆319Jul 8, 2022Updated 4 years ago
- Exploring in-memory execution of .NET☆138Apr 20, 2022Updated 4 years ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆35Sep 15, 2022Updated 4 years ago
- quASAR: ASAR manipulation made easy☆38Sep 7, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- a tool to help operate in EDRs' blind spots☆777Dec 2, 2024Updated last year
- Retrieves exported functions from a legitimate DLL and generates a proxy DLL source code/template for DLL proxy loading or sideloading☆927Jul 21, 2020Updated 6 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆298Jul 15, 2023Updated 3 years ago
- A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…☆1,236Jun 10, 2024Updated 2 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,033Jun 4, 2024Updated 2 years ago
- C# havoc implant☆99Feb 12, 2023Updated 3 years ago
- Generate an obfuscated DLL that will disable AMSI & ETW☆335Jul 15, 2024Updated 2 years ago
- Running .NET from VBA☆147Feb 11, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A method to execute shellcode using RegisterWaitForInputIdle API.☆53Apr 4, 2023Updated 3 years ago
- PoC for UUID shellcode execution using DInvoke☆156Mar 8, 2021Updated 5 years ago
- Nim-based assembly packer and shellcode loader for opsec & profit☆487Feb 24, 2023Updated 3 years ago
- ☆306Oct 29, 2024Updated 2 years ago
- Terminate AV/EDR Processes using kernel driver☆354Jun 12, 2023Updated 3 years ago
- Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP☆136Oct 25, 2026Updated last week
- XLL Phishing Tradecraft☆438May 24, 2022Updated 4 years ago
- A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading☆85Nov 21, 2022Updated 3 years ago
- Encrypted shellcode Injection to avoid Kernel triggered memory scans☆432Sep 12, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆15Feb 9, 2022Updated 4 years ago
- A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.☆462Mar 25, 2024Updated 2 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆411Jan 11, 2026Updated 9 months ago
- Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll☆521Feb 3, 2022Updated 4 years ago
- DLL sideloading techniques for stealthy payload execution on Windows☆100Sep 20, 2023Updated 3 years ago
- A collection of various and sundry code snippets that leverage .NET dynamic tradecraft☆144May 18, 2024Updated 2 years ago
- Dump the memory of any PPL with a Userland exploit chain☆351Mar 17, 2023Updated 3 years ago