A C implementation for a stealth injection method
☆39Jan 30, 2026Updated 9 months ago
Alternatives and similar repositories for StarFly
Users that are interested in StarFly are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A C Implementation for using a new method to invoke undetectable indirect syscalls☆19Dec 2, 2025Updated 11 months ago
- ☆85Oct 18, 2022Updated 4 years ago
- Simulate per-process disconnection in red team environments☆117Jun 6, 2025Updated last year
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- kill AV/EDR☆17Jun 9, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Offensive toolage collection for the Windows environment.☆28Dec 4, 2025Updated 11 months ago
- 绿帽子保护您的电脑安全☆40Mar 8, 2026Updated 7 months ago
- A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…☆32Aug 23, 2023Updated 3 years ago
- 在cobaltstrike中使用的bof工具集，收集整理验证好用的bof。☆17Sep 30, 2021Updated 5 years ago
- 关于RPC一些绕EDR的tips☆201Mar 3, 2023Updated 3 years ago
- This repository implements Threadless Injection in C☆172Dec 23, 2023Updated 2 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated 2 years ago
- Process Creation, Image Load and Thread Creation Notification☆12Sep 15, 2023Updated 3 years ago
- Run pe in memory without relocation table.☆19Mar 11, 2026Updated 7 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.☆104Jul 25, 2025Updated last year
- A C++ proof of concept demonstrating the exploitation of Windows Protected Process Light (PPL) by leveraging COM-to-.NET redirection and …☆337Mar 6, 2025Updated last year
- Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.☆14May 28, 2025Updated last year
- ☆47Nov 27, 2025Updated 11 months ago
- 批量生成修改的图标+数字签名+详细说明后的PE文件☆19Aug 20, 2024Updated 2 years ago
- Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术，不使用API进行主线程劫持，不使用PEB…☆94Jul 26, 2025Updated last year
- nano nuclei engine. no side effect.☆90Aug 23, 2026Updated 2 months ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆111Nov 7, 2025Updated 11 months ago
- 复现K360☆16Apr 5, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler☆149Jul 21, 2025Updated last year
- 获取浏览器保存密码，支持IE、Chrome和火狐☆12Oct 30, 2019Updated 7 years ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆92May 24, 2025Updated last year
- Lonely x64 binary to Bypass Win10 UAC utilizing ALPC method with [command line]☆33Jun 30, 2023Updated 3 years ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆308Sep 23, 2025Updated last year
- Go 代码混淆工具，使用 AST (抽象语法树) 技术实现跨文件的代码混淆，同时保证混淆后的代码可编译和可执行。☆186Aug 18, 2026Updated 2 months ago
- portreuse reuseport 端口复用☆60Aug 27, 2023Updated 3 years ago
- 从内存中提取浏览器和Todesk用户凭证☆434Apr 13, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated last year
- An NTP channel for Beacons, implemented using Cobalt Strike’s External C2 framework.☆35Oct 6, 2025Updated last year
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Taiji-Golang高并发红队打点横向移动内网渗透扫描器（主机存活探测、端口扫描、Web指纹识别、弱口令爆破）☆13Apr 25, 2023Updated 3 years ago
- command execute without 445 port☆58Feb 25, 2022Updated 4 years ago
- 通过劫持explorer的CreateProcess来实现对子进程的全局hook，并对一些敏感api进行hook，来进行快速样本分析（如拿c2等操作）☆10Oct 21, 2023Updated 3 years ago
- A COFF Loader written in Rust☆146Oct 11, 2026Updated 3 weeks ago