HadesW/power-kill external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

HadesW/power-kill

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/HadesW/power-kill)

Close

HadesW / power-killView on GitHubMore

• External links
• Readme badge

power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes

☆48Sep 27, 2021Updated 4 years ago

Alternatives and similar repositories for power-kill

Users that are interested in power-kill are comparing it to the libraries listed below

• timwhitez / CLR-RWX

  View on GitHub
  Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间
  ☆22Sep 28, 2022Updated 3 years ago
• 0vercl0k / CVE-2022-21974

  View on GitHub
  PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"
  ☆60Feb 26, 2022Updated 4 years ago
• wheelerlaw / go-mimikatz

  View on GitHub
  An improvement over the original Mimikatz wrapper.
  ☆19Aug 11, 2021Updated 4 years ago
• BeneficialCode / KPPL

  View on GitHub
  Kill Protected Process Light Process (include av)
  ☆58Sep 15, 2023Updated 2 years ago
• jonny-jhnson / ProcCallback

  View on GitHub
  An example of how a driver can register a handle creation callback.
  ☆16Jun 12, 2023Updated 2 years ago
• nannanshen / burp-jsfinder

  View on GitHub
  jsfind burp插件版
  ☆18May 27, 2022Updated 3 years ago
• Cobalt-Strike / callback_examples

  View on GitHub
  This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions
  ☆38Mar 17, 2025Updated 11 months ago
• west9b / CVE-2022-30525

  View on GitHub
  CVE-2022-30525 Zyxel 防火墙命令注入漏洞 POC&EXPC
  ☆12May 28, 2022Updated 3 years ago
• An0nySec / UserAdd

  View on GitHub
  Bypass AV 用户添加
  ☆169Dec 30, 2021Updated 4 years ago
• dust-life / run_pe

  View on GitHub
  ☆51Aug 28, 2021Updated 4 years ago
• hack2fun / gopher_attack_mssql

  View on GitHub
  Attack SQL Server through gopher protocol
  ☆21Nov 22, 2021Updated 4 years ago
• timwhitez / Doge-Misc

  View on GitHub
  杂 物 收 纳
  ☆15Aug 4, 2023Updated 2 years ago
• Richard-Tang / x1DecoderPlus

  View on GitHub
  AntSword(蚁剑)全参数流量XOR和Base64加伪装WebShell
  ☆163Sep 28, 2021Updated 4 years ago
• w1u0u1 / nanodump

  View on GitHub
  A flexible tool that creates a minidump of the LSASS process
  ☆14Jan 18, 2022Updated 4 years ago
• 12end / cargs

  View on GitHub
  crypto args for golang
  ☆17Feb 14, 2022Updated 4 years ago
• theLSA / sunlogin-exp-cmd

  View on GitHub
  命令行版向日葵RCE漏洞利用工具 / cmd version of sunlogin exploit tool
  ☆15Mar 26, 2022Updated 3 years ago
• rkervella / CarbonMonoxide

  View on GitHub
  EDR Evasion - Combination of SwampThing - TikiTorch
  ☆29May 28, 2020Updated 5 years ago
• Peithon / scLoader

  View on GitHub
  CS shellcode 加载器
  ☆61Jan 7, 2022Updated 4 years ago
• Ryze-T / EdrKiller

  View on GitHub
  ☆91Jun 29, 2021Updated 4 years ago
• crisprss / PetitPotam

  View on GitHub
  替代PrintBug用于本地提权的新方式，主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …
  ☆149Mar 13, 2022Updated 3 years ago
• Allevon412 / ClassicAPIUnhooking

  View on GitHub
  ☆16Nov 23, 2021Updated 4 years ago
• timwhitez / ReturnGate

  View on GitHub
  ReturnGate, just like HellsGate.
  ☆68Aug 10, 2022Updated 3 years ago
• c1y2m3 / FileSearch

  View on GitHub
  C++枚举磁盘列表、遍历指定盘搜索特定类型文件/微信导出密钥,文件回传等功能
  ☆153Jan 9, 2023Updated 3 years ago
• RixedLabs / IDLE-Abuse

  View on GitHub
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆55Apr 4, 2023Updated 2 years ago
• BronzeTicket / ClipboardWindow-Inject

  View on GitHub
  CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback
  ☆68Sep 15, 2022Updated 3 years ago
• YDHCUI / rustdesk

  View on GitHub
  基于rustdesk修改的远程桌面软件，将agent部分分离出来
  ☆226Nov 14, 2023Updated 2 years ago
• wabzsy / dotach

  View on GitHub
  ☆42May 14, 2024Updated last year
• 0x727 / SchTask_0x727

  View on GitHub
  创建隐藏计划任务，权限维持，Bypass AV
  ☆558Sep 1, 2021Updated 4 years ago
• akkuman / toolset

  View on GitHub
  免杀小小工具集
  ☆108Aug 8, 2022Updated 3 years ago
• YDHCUI / csload.net

  View on GitHub
  一个cobaltstrike shellcode加载器，过国内主流杀软
  ☆124May 21, 2021Updated 4 years ago
• passer-W / snakeyaml-memshell

  View on GitHub
  springboot跨线程注入内存马
  ☆123Apr 10, 2022Updated 3 years ago
• JDArmy / NO445-lateral-movement

  View on GitHub
  command execute without 445 port
  ☆57Feb 25, 2022Updated 4 years ago
• lainswork / dwm-screen-shot

  View on GitHub
  将shellcode注入dwm.exe以进行屏幕截取
  ☆356Mar 22, 2022Updated 3 years ago
• paranoidninja / DotNetTracer

  View on GitHub
  C code to enable ETW tracing for Dotnet Assemblies
  ☆32Aug 12, 2022Updated 3 years ago
• timwhitez / Doge-Defense-Evasion-Ref

  View on GitHub
  Defense Evasion & Bypass AntiVirus reference
  ☆74Mar 28, 2021Updated 4 years ago
• Tas9er / EYouMailRCE

  View on GitHub
  Code By:Tas9er / 亿邮电子邮件系统批量远程命令执行
  ☆36Apr 11, 2021Updated 4 years ago
• lovechoudoufu / GoogleCSAgent_cdf

  View on GitHub
  CSAgent 与 GoogleAuth 的缝合体，cobalt strike的破解+otp动态口令的agent
  ☆132Aug 3, 2022Updated 3 years ago
• Kara-4search / HellgateLoader_CSharp

  View on GitHub
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆18Jan 21, 2022Updated 4 years ago
• 0x3rhy / AddUser-Bof

  View on GitHub
  Cobalt Strike BOF that Add an admin user
  ☆79Oct 11, 2022Updated 3 years ago