JLospinoso / cpp-implantLinks
A simple implant showcasing modern C++
☆106Updated 4 years ago
Alternatives and similar repositories for cpp-implant
Users that are interested in cpp-implant are comparing it to the libraries listed below
Sorting:
- Evasive Process Hollowing Techniques☆139Updated 4 years ago
- The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).☆229Updated 5 months ago
- ☆135Updated 2 months ago
- Simple EDR implementation to demonstrate bypass☆173Updated 5 years ago
- Experiment on reproducing Obfuscate & Sleep☆145Updated 4 years ago
- A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.☆178Updated last month
- A recreation of the "Nobelium" malware based on Microsofts Malware analysis - Part 1: PDF2Pwn☆101Updated 2 years ago
- PoC for proxying COM objects when hijacking☆208Updated 5 years ago
- Managed assembly shellcode generation☆271Updated 4 years ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆217Updated 5 years ago
- Red Team Operator: Malware Development Essentials Course☆98Updated 4 years ago
- Apply a filter to the events being reported by windows event logging☆261Updated 4 years ago
- https://blog.f-secure.com/hiding-malicious-code-with-module-stomping/☆121Updated 5 years ago
- A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.☆167Updated 3 years ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆103Updated 2 years ago
- Project to check which Nt/Zw functions your local EDR is hooking☆192Updated 4 years ago
- C# Implementation of the Hell's Gate VX Technique☆214Updated 4 years ago
- ☆112Updated last year
- PoC MSVC COFF Object file loader/injector.☆177Updated 4 years ago
- WTSRM☆212Updated 2 years ago
- A shellcode function to encrypt a running process image when sleeping.☆339Updated 3 years ago
- Detect strange memory regions and DLLs☆183Updated 3 years ago
- Beacon Object File (BOF) for remote process injection via thread hijacking☆212Updated 4 years ago
- ☆151Updated 4 years ago
- Example code for EDR bypassing☆150Updated 6 years ago
- Building and Executing Position Independent Shellcode from Object Files in Memory☆156Updated 4 years ago
- ☆198Updated 4 years ago
- A fake AMSI Provider which can be used for persistence.☆150Updated 4 years ago
- ☆113Updated 3 years ago
- 64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.☆129Updated 2 years ago