Indirect Syscall implementation to bypass userland NTAPIs hooking.
☆84Aug 13, 2024Updated 2 years ago
Alternatives and similar repositories for Hellshazzard
Users that are interested in Hellshazzard are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Local SYSTEM auth trigger for relaying - X☆162Jul 23, 2025Updated last year
- Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.☆308Apr 6, 2025Updated last year
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆118Jan 20, 2025Updated last year
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- C++ self-Injecting dropper based on various EDR evasion techniques.☆445Feb 11, 2024Updated 2 years ago
- Execute shellcode files with rundll32☆229Jan 28, 2024Updated 2 years ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆218Oct 19, 2024Updated last year
- ☆109Oct 29, 2024Updated last year
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆312Jul 31, 2024Updated 2 years ago
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆193Jan 17, 2026Updated 9 months ago
- Evasive shellcode loader☆400Oct 17, 2024Updated 2 years ago
- early cascade injection PoC based on Outflanks blog post☆240Nov 7, 2024Updated last year
- Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths☆366Aug 11, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆155Apr 18, 2025Updated last year
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆73May 1, 2024Updated 2 years ago
- Activation Context Hijacking Evasion Tool☆313Jun 17, 2026Updated 4 months ago
- use python on windows with full submodule support without installation☆30Jan 23, 2025Updated last year
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆77Dec 26, 2025Updated 9 months ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆249Jun 11, 2024Updated 2 years ago
- Shellcode loader☆103Nov 24, 2024Updated last year
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆410Jan 11, 2026Updated 9 months ago
- Dynamic shellcode loader with sophisticated evasion capabilities☆342Oct 1, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆159Dec 13, 2024Updated last year
- Playing around with Thread Context Hijacking. Building more evasive primitives to use as alternative for existing process injection techn…☆210Jun 17, 2025Updated last year
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆324Apr 12, 2024Updated 2 years ago
- converts sRDI compatible dlls to shellcode☆39Jan 20, 2025Updated last year
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆116Jul 14, 2026Updated 3 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- ☆52Jun 12, 2026Updated 4 months ago
- NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.☆92Jun 24, 2026Updated 3 months ago
- Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven☆276Oct 16, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆306Jun 12, 2026Updated 4 months ago
- ☆141Jan 16, 2025Updated last year
- A BOF that's a BOF Loader and more☆213Apr 6, 2026Updated 6 months ago
- Evasive loader for .NET Framework assemblies☆53May 14, 2026Updated 5 months ago
- Generic PE loader for fast prototyping evasion techniques☆247Jul 2, 2024Updated 2 years ago
- ☆209Nov 28, 2023Updated 2 years ago
- Shellcode Loader Utilizing ETW Events☆66Feb 26, 2025Updated last year