Repo for malware development practices I post on my blog
☆35Oct 5, 2024Updated last year
Alternatives and similar repositories for malware-practices
Users that are interested in malware-practices are comparing it to the libraries listed below
Sorting:
- Shellcode loader with evasion capabilities written in Nim☆14Jan 25, 2025Updated last year
- ☆26Jun 19, 2022Updated 3 years ago
- A cheatsheet and mindmap for CRTO certification☆14Mar 22, 2023Updated 2 years ago
- Golang library for malware development☆385Nov 20, 2024Updated last year
- Windows process injection methods☆18Jul 18, 2021Updated 4 years ago
- Thanks to @d35ha☆13Aug 16, 2021Updated 4 years ago
- string encryption in Nim☆20Jun 15, 2024Updated last year
- Callback Function Loader Implemented in Go☆140Mar 26, 2024Updated last year
- ☆36Apr 29, 2023Updated 2 years ago
- Go implementation of the Heaven's Gate technique☆102Feb 11, 2021Updated 5 years ago
- impersonate trustedinstaller by fiddling with tokens☆17Aug 30, 2021Updated 4 years ago
- crawler for finding reflected parameters and reflecting special characters!☆21Dec 2, 2024Updated last year
- This project used to learn golang and try to bypass AV☆21Sep 20, 2021Updated 4 years ago
- Shellcode loader generator with multiples features☆506Dec 31, 2024Updated last year
- a simple backdoor in Nim☆19Aug 6, 2021Updated 4 years ago
- RawCopy - Golang implementation☆24Oct 27, 2022Updated 3 years ago
- A golang library designed to interact with Metasploit☆43Mar 27, 2021Updated 4 years ago
- Change hash for a signed pe☆17Jul 18, 2023Updated 2 years ago
- ☆104Nov 14, 2025Updated 3 months ago
- By manipulating LSASS memory flags like UseLogonCredential and IsCredGuardEnabled, this repo demonstrates how Credential Guard can be byp…☆14May 25, 2025Updated 9 months ago
- govenom is a msfvenom-inspired cross-platform payload generator toolkit written in Go☆21Sep 9, 2020Updated 5 years ago
- Go Shellcode Loader to be Integrated in Exploration C2☆27Feb 7, 2025Updated last year
- A cheatsheet of tools and commands that I use to pentest Active Directory.☆52Mar 26, 2022Updated 3 years ago
- Allow a Go process to dynamically load .NET assemblies☆150Mar 28, 2020Updated 5 years ago
- An easy way to getsystem by golang.☆55Aug 30, 2021Updated 4 years ago
- Standardised setup for researching WordPress plugin- and theme vulnerabilities.☆29Updated this week
- HydrAttack PoC eMail Spoofer Module is designed to test the security posture of a domain against email spoofing attacks. It performs step…☆30Jul 10, 2025Updated 7 months ago
- Proof of concept SMB C2 using named pipes in Golang☆25Sep 8, 2019Updated 6 years ago
- Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs☆26Dec 3, 2021Updated 4 years ago
- Golang implementation of Reflective load PE from memory☆64Jan 10, 2022Updated 4 years ago
- Preventing 3rd Party DLLs from Injecting into your Malware☆25Aug 31, 2021Updated 4 years ago
- use aswArPot.sys to kill process☆69Aug 26, 2022Updated 3 years ago
- This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of alm…☆109Feb 14, 2023Updated 3 years ago
- 利用NTLM Hash读取Exchange邮件☆58May 13, 2023Updated 2 years ago
- improved shellcode template for b1tg/rust-windows-shellcode☆29May 12, 2021Updated 4 years ago
- execute a PE in the address space of another PE aka process hollowing☆60Dec 2, 2021Updated 4 years ago
- YouTube for Android Auto without ROOT (rootless)☆19Mar 25, 2021Updated 4 years ago
- PHP lab to test captcha bypassing☆30Jan 8, 2024Updated 2 years ago
- SwaraVM is a mobile security virtual machine that aggregates tools and resources that are commonly used for network traffic analysis, mal…☆32Aug 6, 2019Updated 6 years ago