A C Implementation for using a new method to invoke undetectable indirect syscalls
☆19Dec 2, 2025Updated 11 months ago
Alternatives and similar repositories for GalaxyGate
Users that are interested in GalaxyGate are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A C implementation for a stealth injection method☆39Jan 30, 2026Updated 9 months ago
- ☆14Oct 10, 2024Updated 2 years ago
- ☆85Oct 18, 2022Updated 4 years ago
- Stack integrity verification to Detect SleepMask or CallStack Spoofer☆55Jul 13, 2025Updated last year
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 通过劫持explorer的CreateProcess来实现对子进程的全局hook，并对一些敏感api进行hook，来进行快速样本分析（如拿c2等操作）☆10Oct 21, 2023Updated 3 years ago
- ☆19May 30, 2025Updated last year
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- ☆10Sep 19, 2024Updated 2 years ago
- Boilerplate to develop raw and truly Position Independent Code (PIC).☆118Jan 20, 2025Updated last year
- Repo to the corresponding blog post about implant P2P communications.☆13Dec 7, 2025Updated 10 months ago
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- CobaltStrike Team Server批量暴力破解脚本☆13Apr 9, 2021Updated 5 years ago
- This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools.…☆15Dec 16, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A process injection technique using only thread context manipulation☆43Dec 18, 2023Updated 2 years ago
- 重构Beacon☆15Aug 25, 2024Updated 2 years ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆80Aug 25, 2025Updated last year
- SysCaller: SDK for WindowsAPI via syscalls. Dynamic Resolution, Obfuscation, Multi-Language Bindings, & more!☆70Sep 26, 2026Updated last month
- A BOF to create a scheduled task using a COM object.☆23Sep 1, 2026Updated 2 months ago
- Basic multi platform meterpreter loader module.☆16Jul 21, 2020Updated 6 years ago
- go实现windows计划任务管理，过杀软☆12Aug 26, 2021Updated 5 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated 2 years ago
- query specific user and login IP from remote machine☆18Nov 19, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago
- Things i do because i saw it on twitter on a weekend☆56Jul 20, 2025Updated last year
- Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.☆104Jul 25, 2025Updated last year
- Runpe + DInvoke + Syscall☆18Jun 18, 2021Updated 5 years ago
- Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray☆46Mar 4, 2023Updated 3 years ago
- BOF to manage Active Directory Integrated DNS (ADIDNS)☆28Jul 28, 2025Updated last year
- Cookie & Logins stealer for Firefox + Chrome, demonstration only☆12Apr 5, 2023Updated 3 years ago
- Repo for developing the endpoint package☆34Updated this week
- ☆15Nov 19, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆77Mar 16, 2026Updated 7 months ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- a dumb rpm/wpm example driver☆14Jun 7, 2021Updated 5 years ago
- Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven☆278Oct 16, 2024Updated 2 years ago
- Use hardware breakpoints to spoof the call stack for both syscalls and API calls☆205Jun 6, 2024Updated 2 years ago
- Titan: A generic user defined reflective DLL for Cobalt Strike☆84Nov 20, 2022Updated 3 years ago
- A collection of position independent coding resources☆128Nov 15, 2025Updated 11 months ago