EvilBytecode / GetSyscallStubGo
GetSyscallStubCGo.
☆8Updated last month
Related projects: ⓘ
- Measures average CPU cycles for the CPUID instruction to detect if the code is running in a VM by comparing against a threshold.☆16Updated last month
- (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.☆15Updated last month
- Unhook Ntdll.dll, Go & C++.☆11Updated 2 months ago
- dump Chrome cookies remotely with atexec and CDP☆10Updated last month
- a demo module for the kaine agent to execute and inject assembly modules☆33Updated 3 weeks ago
- Ransomware written in go, encrypt - decrypt.☆15Updated 2 months ago
- Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.☆41Updated 6 months ago
- Command and Control☆23Updated last month
- ☆23Updated 4 months ago
- Parent Process ID Spoofing, coded in CGo.☆21Updated 2 months ago
- C# API for Nidhogg rootkit☆15Updated 4 months ago
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆36Updated 6 months ago
- A direct improvement to remote TLS Injection.☆15Updated 3 months ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆20Updated this week
- A malicous Golang Package☆10Updated 2 months ago
- Windows AppLocker Driver (appid.sys) LPE☆30Updated last month
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆34Updated 9 months ago
- A simple rpc2socks alternative in pure Go.☆23Updated 2 months ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆30Updated 10 months ago
- A utility that can be used to launch an executable with a DLL injected☆19Updated 10 months ago
- ☆26Updated 2 months ago
- ☆13Updated last month
- A firebeam plugin that exploits the CVE-2024-26229 vulnerability to perform elevation of privilege from a unprivileged user☆30Updated last month
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆12Updated 8 months ago
- ☆38Updated 2 months ago
- Reimplementation of the KExecDD DSE bypass technique.☆42Updated 2 weeks ago
- ☆23Updated 10 months ago
- Detect WFP filters blocking EDR communications☆49Updated 8 months ago
- A simple BOF (Beacon Object File) to search files in the system☆11Updated 9 months ago
- ☆18Updated last month