Simple EDR that injects a DLL into a process to place a hook on specific Windows API
☆99Aug 27, 2023Updated 3 years ago
Alternatives and similar repositories for SimpleEDR
Users that are interested in SimpleEDR are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆107Sep 22, 2023Updated 3 years ago
- List the ETW provider(s) in the registration table of a process.☆82Sep 20, 2023Updated 3 years ago
- ☆19Sep 17, 2025Updated last year
- ☆129Jun 28, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Dynamic MSBuild task to help with minor obfuscation of C# Binaries to evade static signatures on each compilation☆38Jul 30, 2026Updated 3 months ago
- PoC module to demonstrate automated lateral movement with the Havoc C2 framework.☆312Dec 9, 2023Updated 2 years ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆315Sep 18, 2024Updated 2 years ago
- ☆106Sep 5, 2023Updated 3 years ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆170Jan 4, 2024Updated 2 years ago
- Resources and Discussions About Detection Engineering☆12Sep 28, 2022Updated 4 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆410Jan 11, 2026Updated 9 months ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 2 years ago
- ☆123Dec 23, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Threadless Process Injection through entry point hijacking☆353Sep 10, 2024Updated 2 years ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆50May 8, 2024Updated 2 years ago
- Abuse leaked token handles.☆135Dec 14, 2023Updated 2 years ago
- ☆105Oct 7, 2023Updated 3 years ago
- Performing Indirect Clean Syscalls☆631May 2, 2026Updated 5 months ago
- A C# project that builds a Web Application which redirects all HTTPS☆28Feb 11, 2025Updated last year
- C# havoc implant☆98Feb 12, 2023Updated 3 years ago
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆205Jun 23, 2023Updated 3 years ago
- ☆60Dec 15, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Detect userland hooks placed by AV/EDR☆28Sep 4, 2023Updated 3 years ago
- CreateRemoteThreadPlus: how to pass multiple parameters to the remote thread function without shellcode.☆142Jul 10, 2025Updated last year
- ☆47Jun 21, 2023Updated 3 years ago
- An improvement and a different approach to Mockingjay Self-Injection.☆34May 21, 2024Updated 2 years ago
- Basic interactive Windows kernel offensive toolkit written in C☆139Sep 20, 2025Updated last year
- Reaping treasures from strings in remote processes memory☆286Feb 8, 2025Updated last year
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆57Oct 10, 2022Updated 4 years ago
- ☆126Dec 12, 2025Updated 10 months ago
- COFF file (BOF) for managing Kerberos tickets.☆323Jul 2, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Lockless BOF☆79May 2, 2025Updated last year
- An App Domain Manager Injection DLL PoC on steroids☆241Dec 14, 2023Updated 2 years ago
- ☆126Sep 1, 2024Updated 2 years ago
- Collection of self-made Red Team tools that have come in handy☆12Aug 25, 2024Updated 2 years ago
- BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released a…☆400Jan 9, 2024Updated 2 years ago
- Threadless Process Injection using remote function hooking.☆823Sep 4, 2024Updated 2 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆217Feb 6, 2025Updated last year