Manually perform syscalls without going through any external API or DLL.
☆18Apr 19, 2023Updated 3 years ago
Alternatives and similar repositories for NtSyscaller
Users that are interested in NtSyscaller are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dynamically generated obfuscated jumps and/or function calls☆38Apr 19, 2023Updated 3 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- Research of modifying exported function names at runtime (C/C++, Windows)☆18May 28, 2024Updated 2 years ago
- Small tool to play with IOCs caused by Imageload events☆47May 14, 2023Updated 3 years ago
- ☆10Sep 11, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Run CobaltStrike aggressorscript over TCP☆16Feb 9, 2026Updated 8 months ago
- Another Portable Executable files analysing stuff☆21May 28, 2011Updated 15 years ago
- Ready-to-use headers for Windows Kernel SSDT indices☆10Apr 12, 2020Updated 6 years ago
- ☆14Nov 29, 2021Updated 4 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- POC - x64 injector -> x86 injectee dll injector☆15Apr 4, 2024Updated 2 years ago
- A pure C version of SymProcAddress☆30Mar 17, 2024Updated 2 years ago
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆47Mar 15, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆25Apr 28, 2024Updated 2 years ago
- Classic Bofa adapted to CobaltStrike.☆11Oct 4, 2022Updated 4 years ago
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- IAT Unhooking proof-of-concept☆33Apr 7, 2024Updated 2 years ago
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆36Jan 15, 2022Updated 4 years ago
- Nice try reading NTDLL from disk, nerd.☆19Apr 18, 2022Updated 4 years ago
- Demo to show how write ALPC Client & Server using native Ntdll.dll syscalls.☆21Jan 25, 2022Updated 4 years ago
- Command and Control (C2) framework☆133May 16, 2025Updated last year
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Windbg extension port for rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.☆13Sep 20, 2026Updated last month
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆68May 2, 2023Updated 3 years ago
- improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys☆49Mar 10, 2023Updated 3 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆25Mar 26, 2020Updated 6 years ago
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆103Sep 18, 2023Updated 3 years ago
- Collection of shellcode injection and execution techniques☆17Mar 17, 2026Updated 7 months ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆91Apr 15, 2025Updated last year
- Tutorial covering how to discover DLLs for Hijacking and how to create proxy DLLS using Microsoft Teams as an example☆15Apr 7, 2021Updated 5 years ago
- A (quite) simple steganography algorithm to hide shellcodes within bitmap image.☆25May 4, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆18Mar 25, 2019Updated 7 years ago
- ☆26Mar 10, 2022Updated 4 years ago
- Shellcoder.py - simple script to automate shellcoding process and shellcode testing.☆13Jul 23, 2024Updated 2 years ago
- Simple shellcode injection in Nim encrypted in XOR☆22Aug 21, 2023Updated 3 years ago
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆45Feb 6, 2026Updated 8 months ago
- XOR decrypting shellcode using the GPU with OpenCL. Original PoC adopted by e.g. CoffeeLoader, GpuGate.☆131May 22, 2025Updated last year
- External Hooking ( Bypasss process byte patching checks | Injector included )☆21Mar 12, 2023Updated 3 years ago