D1rkMtr / ObfLoader

Related projects: ⓘ

• D1rkMtr / IORI_Loader
  ☆163Updated this week
• paranoidninja / PIC-Get-Privileges
  Building and Executing Position Independent Shellcode from Object Files in Memory
  ☆154Updated 3 years ago
• D1rkMtr / ExecRemoteAssembly
  ☆245Updated this week
• reveng007 / ReflectiveNtdll
  A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…
  ☆163Updated last year
• klezVirus / NimlineWhispers3
  A tool for converting SysWhispers3 syscalls for use with Nim projects
  ☆137Updated 2 years ago
• janoglezcampos / c_syscalls
  Single stub direct and indirect syscalling with runtime SSN resolving for windows.
  ☆126Updated 2 years ago
• NUL0x4C / ApiHashing
  ☆100Updated this week
• y11en / FOLIAGE
  Experiment on reproducing Obfuscate & Sleep
  ☆136Updated 3 years ago
• reveng007 / CheckHooks-n-load
  ☆107Updated this week
• SecIdiot / FOLIAGE
  ☆99Updated this week
• NVISOsecurity / CobaltWhispers
  CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…
  ☆225Updated last year
• cube0x0 / SyscallPack
  ☆221Updated this week
• realoriginal / titanldr-ng
  A newer iteration of TitanLdr with some newer hooks, and design. A generic user defined reflective DLL I built to prove a point to Mudge …
  ☆151Updated last year
• EvanMcBroom / perfect-loader
  Load a dynamic library from memory by modifying the native Windows loader
  ☆198Updated 11 months ago
• kyleavery / TitanLdr
  Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.
  ☆134Updated 2 years ago
• Cracked5pider / CoffeeLdr
  Beacon Object File Loader
  ☆270Updated 9 months ago
• waldo-irc / YouMayPasser
  You shall pass
  ☆241Updated 2 years ago
• paranoidninja / Proxy-DLL-Loads
  The code is a pingback to the Dark Vortex blog:
  ☆162Updated last year
• tijme / amd-ryzen-master-driver-v17-exploit
  Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).
  ☆131Updated last year
• fortra / hw-call-stack
  Use hardware breakpoints to spoof the call stack for both syscalls and API calls
  ☆177Updated 3 months ago
• Cobalt-Strike / CallStackMasker
  A PoC implementation for dynamically masking call stacks with timers.
  ☆244Updated last year
• S4ntiagoP / donut
  Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…
  ☆109Updated 10 months ago
• YOLOP0wn / EchoDrv
  Exploitation of echo_driver.sys
  ☆165Updated last year
• NVISOsecurity / Interceptor
  Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
  ☆120Updated last year
• connormcgarr / cThreadHijack
  Beacon Object File (BOF) for remote process injection via thread hijacking
  ☆186Updated 3 years ago
• RistBS / ContextMenuHijack
  Execute a payload at each right click on a file/folder in the explorer menu for persistence
  ☆164Updated last year
• gabriellandau / EDRSandblast-GodFault
  EDRSandblast-GodFault
  ☆239Updated last year
• rad9800 / misc
  miscellaneous scripts and programs
  ☆211Updated last year
• naksyn / DojoLoader
  Generic PE loader for fast prototyping evasion techniques
  ☆175Updated 2 months ago
• xalicex / Killers
  Exploitation of process killer drivers
  ☆182Updated 11 months ago