A C Implementation for using a new method to invoke undetectable indirect syscalls
☆20Dec 2, 2025Updated 7 months ago
Alternatives and similar repositories for GalaxyGate
Users that are interested in GalaxyGate are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A C implementation for a stealth injection method☆39Jan 30, 2026Updated 5 months ago
- A BOF to create a scheduled task using a COM object.☆19Dec 3, 2024Updated last year
- ☆84Oct 18, 2022Updated 3 years ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- query specific user and login IP from remote machine☆18Nov 19, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- go实现windows计划任务管理，过杀软☆12Aug 26, 2021Updated 4 years ago
- impersonate trustedinstaller by fiddling with tokens☆14Aug 30, 2021Updated 4 years ago
- This is a library for stealing browser passwords, crypto stuff, password manager extension stuff, and just general applications too☆13May 10, 2024Updated 2 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated last year
- 重构Beacon☆15Aug 25, 2024Updated last year
- Repo for developing the endpoint package☆31Updated this week
- Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray☆47Mar 4, 2023Updated 3 years ago
- CobaltStrike Team Server批量暴力破解脚本☆12Apr 9, 2021Updated 5 years ago
- Basic multi platform meterpreter loader module.☆16Jul 21, 2020Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆15Nov 19, 2023Updated 2 years ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆73Mar 6, 2024Updated 2 years ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆141Jan 29, 2026Updated 5 months ago
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆326Apr 12, 2024Updated 2 years ago
- Simple .NET loader for loading and executing Powershell payloads☆17Nov 5, 2021Updated 4 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆44Dec 22, 2021Updated 4 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆52Dec 4, 2023Updated 2 years ago
- EDR/AV Simulation for Malware Development☆13Oct 21, 2023Updated 2 years ago
- ☆104Jan 21, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Submission, compilation and execution of C# code snippets, using an unmanaged CLR Host☆60Jan 29, 2015Updated 11 years ago
- a tiny code that performs kernel-mode read/write using CVE-2023-38817.☆18Mar 28, 2025Updated last year
- Blog/Journal on how to backdoor VSCode extensions☆81Feb 24, 2026Updated 4 months ago
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆205Jun 6, 2024Updated 2 years ago
- Append custom data to signed pe file and DONOT DESTROY SIGNED STATUS.☆26Mar 13, 2021Updated 5 years ago
- Shellcode loader☆104Nov 24, 2024Updated last year
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆41Jul 9, 2023Updated 2 years ago
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆154Apr 18, 2025Updated last year
- This repository implements Threadless Injection in C☆172Dec 23, 2023Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A Simple PoC☆22May 24, 2024Updated 2 years ago
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year
- A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.☆71Aug 16, 2022Updated 3 years ago
- ncatbot插件：下载jm本子转为pdf发到QQ聊天☆48Apr 2, 2026Updated 3 months ago
- A collection of position independent coding resources☆122Nov 15, 2025Updated 7 months ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated last year
- Creation and removal of Defender path exclusions and exceptions in C#.☆32Nov 1, 2023Updated 2 years ago