Demonstration of Early Bird APC Injection - MITRE ID T1055.004
☆35Oct 31, 2023Updated 2 years ago
Alternatives and similar repositories for EarlyBird-APC-Injection
Users that are interested in EarlyBird-APC-Injection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- A mechanism that trampoline hooks functions in x86/x64 systems.☆21Oct 9, 2024Updated 2 years ago
- Classic Process Injection with Memory Evasion Techniques implemantation☆73Oct 28, 2023Updated 3 years ago
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- ☆222Mar 10, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ECC Public Key Cryptography☆36Oct 29, 2023Updated 3 years ago
- PoC for downloading data by injecting into processes to evade firewalls☆35Nov 29, 2025Updated 11 months ago
- The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.☆29Mar 9, 2024Updated 2 years ago
- Lateral Movement☆126Nov 14, 2023Updated 2 years ago
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated 2 years ago
- Exploitation of echo_driver.sys☆170Sep 16, 2023Updated 3 years ago
- Documents Exfiltration project for fun and educational purposes☆143Oct 10, 2023Updated 3 years ago
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- Persistence via Shell Extensions☆62Aug 4, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Evasive loader to bypass static detection☆58Jan 15, 2024Updated 2 years ago
- One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel☆44Oct 2, 2023Updated 3 years ago
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆16Nov 1, 2023Updated 2 years ago
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆194Mar 4, 2024Updated 2 years ago
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆47Oct 11, 2025Updated last year
- Process Injection Techniques using DIrect and Indirect Syscalls☆11Dec 6, 2024Updated last year
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆54Oct 19, 2023Updated 3 years ago
- Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process☆292Jan 21, 2024Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Credential Guard Bypass Via Patching Wdigest Memory☆339Feb 3, 2023Updated 3 years ago
- DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable☆66Apr 4, 2026Updated 6 months ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- Use hardware breakpoint to dynamically change SSN in run-time☆280Apr 10, 2024Updated 2 years ago
- The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section☆112Jul 15, 2023Updated 3 years ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆111Nov 7, 2025Updated 11 months ago
- The code is a pingback to the Dark Vortex blog:☆191Jan 26, 2023Updated 3 years ago
- ☆15Feb 9, 2022Updated 4 years ago
- Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)☆266Jun 29, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆188Jan 23, 2024Updated 2 years ago
- Identifies bad bytes from static analysis with any Anti-Virus scanner.☆128Jul 5, 2024Updated 2 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆410Jan 11, 2026Updated 9 months ago
- Native Syscalls Shellcode Injector☆264Jul 2, 2023Updated 3 years ago
- hacking tools☆14Jan 29, 2023Updated 3 years ago
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules☆41May 6, 2023Updated 3 years ago