Faisal-P27 / WAREED-DNS-C2

Related projects: ⓘ

• Cipher7 / ApexLdr
  ApexLdr is a DLL Payload Loader written in C
  ☆98Updated 2 months ago
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆147Updated 10 months ago
• 0xHossam / HuffLoader
  Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader
  ☆75Updated 6 months ago
• OtterHacker / SetProcessInjection
  ☆142Updated 11 months ago
• cpu0x00 / SharpReflectivePEInjection
  reflectively load and execute PEs locally and remotely bypassing EDR hooks
  ☆151Updated 8 months ago
• VoldeSec / PatchlessInlineExecute-Assembly
  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.
  ☆143Updated last year
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated 9 months ago
• som3canadian / Cloudflare-Redirector
  Just another C2 Redirector using CloudFlare.
  ☆76Updated 4 months ago
• dmcxblue / SharpBlackout
  Terminate AV/EDR leveraging BYOVD attack
  ☆77Updated last year
• blackarrowsec / Handly
  Abuse leaked token handles.
  ☆129Updated 9 months ago
• mertdas / SharpLateral
  Lateral Movement
  ☆117Updated 10 months ago
• Tw1sm / SQL-BOF
  Library of BOFs to interact with SQL servers
  ☆143Updated 3 months ago
• securifybv / BOFRyptor
  ☆113Updated 11 months ago
• nettitude / Tartarus-TpAllocInject
  ☆172Updated 9 months ago
• Octoberfest7 / DropSpawn_BOF
  CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking
  ☆214Updated last year
• rasta-mouse / SCMUACBypass
  ☆92Updated last year
• dmcxblue / SharpGhostTask
  A C# port from Invoke-GhostTask
  ☆108Updated 8 months ago
• vxCrypt0r / AMSI_VEH
  A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…
  ☆142Updated 3 months ago
• nbaertsch / AutoAppDomainHijack
  Automated .NET AppDomain hijack payload generation
  ☆112Updated 2 months ago
• Mr-Un1k0d3r / Elevate-System-Trusted-BOF
  ☆143Updated last year
• RtlDallas / OdinLdr
  ☆179Updated this week
• ZERODETECTION / MSC_Dropper
  ☆119Updated last month
• SaadAhla / D1rkSleep
  Improved version of EKKO by @5pider that Encrypts only Image Sections
  ☆110Updated last year
• OmriBaso / WTSImpersonator
  WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"
  ☆114Updated 2 months ago
• MalwareTech / EDRception
  A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
  ☆164Updated 8 months ago
• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆59Updated 3 months ago
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆171Updated 7 months ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆74Updated 3 months ago
• Tylous / Mangle
  Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
  ☆59Updated last year
• sokaRepo / CoercedPotatoRDLL
  Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege
  ☆200Updated 9 months ago