Idov31 / FunctionStomping

Related projects ⓘ

Alternatives and complementary repositories for FunctionStomping

• Cerbersec / Ares
  Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique
  ☆328Updated 2 years ago
• mgeeky / ShellcodeFluctuation
  An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…
  ☆942Updated 2 years ago
• aaaddress1 / PR0CESS
  some gadgets about windows process and ready to use :)
  ☆575Updated last year
• hasherezade / transacted_hollowing
  Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging
  ☆521Updated 8 months ago
• Cracked5pider / Stardust
  A modern 64-bit position independent implant template
  ☆1,046Updated 6 months ago
• hlldz / RefleXXion
  RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, …
  ☆482Updated 2 years ago
• Idov31 / Cronos
  PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.
  ☆563Updated last year
• mgeeky / ThreadStackSpoofer
  Thread Stack Spoofing - PoC for an advanced In-Memory evasion technique allowing to better hide injected shellcode's memory allocation fr…
  ☆1,046Updated 2 years ago
• frkngksl / Huan
  Encrypted PE Loader Generator
  ☆537Updated 3 years ago
• optiv / Mangle
  Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
  ☆1,173Updated last year
• Cracked5pider / KaynLdr
  KaynLdr is a Reflective Loader written in C/ASM
  ☆521Updated 11 months ago
• mgeeky / ProtectMyTooling
  Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts wa…
  ☆874Updated last year
• winterknife / PINKPANTHER
  Windows x64 handcrafted token stealing kernel-mode shellcode
  ☆503Updated 7 months ago
• thefLink / RecycledGate
  Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll
  ☆444Updated 2 years ago
• janoglezcampos / DeathSleep
  A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…
  ☆498Updated 2 years ago
• boku7 / BokuLoader
  A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
  ☆1,258Updated 11 months ago
• Tylous / ZipExec
  A unique technique to execute binaries from a password protected zip
  ☆1,008Updated 2 years ago
• am0nsec / HellsGate
  Original C Implementation of the Hell's Gate VX Technique
  ☆953Updated 3 years ago
• NUL0x4C / TerraLdr
  A Payload Loader Designed With Advanced Evasion Features
  ☆499Updated 2 years ago
• rad9800 / TamperingSyscalls
  ☆461Updated 2 years ago
• KaLendsi / CVE-2022-21882
  win32k LPE
  ☆460Updated 2 years ago
• jfmaes / LazySign
  Create fake certs for binaries using windows binaries and the power of bat files
  ☆543Updated 7 months ago
• forrest-orr / moneta
  Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs
  ☆686Updated 8 months ago
• Cracked5pider / Ekko
  Sleep Obfuscation
  ☆686Updated 11 months ago
• trustedsec / COFFLoader
  ☆471Updated 3 weeks ago
• NUL0x4C / AtomPePacker
  A Highly capable Pe Packer
  ☆684Updated 2 years ago
• Idov31 / Venom
  Venom is a library that meant to perform evasive communication using stolen browser socket
  ☆373Updated last year
• klezVirus / inceptor
  Template-Driven AV/EDR Evasion Framework
  ☆1,590Updated last year
• optiv / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆740Updated last year