Cipher7 / havoc-PoolParty
Windows Thread Pool Injection Havoc Implementation
☆28Updated 10 months ago
Alternatives and similar repositories for havoc-PoolParty:
Users that are interested in havoc-PoolParty are comparing it to the libraries listed below
- Section-based payload obfuscation technique for x64☆59Updated 6 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated 11 months ago
- Construct the payload at runtime using an array of offsets☆61Updated 7 months ago
- Lateral Movement via the .NET Profiler☆79Updated 2 months ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆68Updated 9 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 7 months ago
- ☆52Updated 3 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆73Updated 6 months ago
- ☆93Updated 5 months ago
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆58Updated last year
- ☆51Updated last month
- Mythic C2 Agent written in x64 PIC C☆67Updated 2 weeks ago
- C++ Staged Shellcode Loader with Evasion capabilities.☆79Updated 4 months ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆46Updated 9 months ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆69Updated 3 weeks ago
- a port of privkit bof for havoc☆23Updated last year
- A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust☆83Updated 10 months ago
- ☆93Updated 11 months ago
- ☆47Updated last year
- Threadless shellcode injection tool☆63Updated 6 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆39Updated last year
- A collection of position independent coding resources☆66Updated 3 weeks ago
- BOF with Synthetic Stackframe☆106Updated 3 weeks ago
- C# havoc implant☆97Updated 2 years ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆83Updated 7 months ago