Artemis - C++ Hell's Gate Syscall Implementation
☆35Aug 16, 2023Updated 3 years ago
Alternatives and similar repositories for Artemis
Users that are interested in Artemis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Files for http://blog.deniable.org/posts/windows-callbacks/☆86Feb 26, 2022Updated 4 years ago
- Nice try reading NTDLL from disk, nerd.☆19Apr 18, 2022Updated 4 years ago
- ☆19May 22, 2024Updated 2 years ago
- This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…☆36Jan 15, 2022Updated 4 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆38May 3, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Various methods of executing shellcode☆75Mar 27, 2023Updated 3 years ago
- Proof-of-Concept software for detecting AV/EDR hooks in Windows libraries.☆40May 12, 2022Updated 4 years ago
- My adventures in learning about different userland malware techniques, such as syscalls, injection, unhooking or sandbox evasion.☆80Jan 10, 2024Updated 2 years ago
- ☆16Apr 18, 2023Updated 3 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx☆16Apr 26, 2021Updated 5 years ago
- ☆42Jan 2, 2023Updated 3 years ago
- Inject shellcode into process via "EarlyBird"☆27Aug 30, 2021Updated 5 years ago
- Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.☆242Sep 26, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆20Oct 28, 2023Updated 3 years ago
- C2 redirector as a web API☆10May 22, 2021Updated 5 years ago
- A pure C version of SymProcAddress☆30Mar 17, 2024Updated 2 years ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆542Aug 1, 2022Updated 4 years ago
- Bypass Malware Time Delays☆106Sep 23, 2022Updated 4 years ago
- POC for frustrating/defeating Malware Analysts☆153Jun 12, 2022Updated 4 years ago
- Beacon Object File implementation of Yaxser's Backstab☆15Mar 9, 2022Updated 4 years ago
- ☆10Sep 11, 2026Updated last month
- NailaoLoader: Hiding Execution Flow via Patching☆24Feb 27, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Debugger utilizing stealth hooks to hide from debugger detection☆27Aug 22, 2026Updated 2 months ago
- ☆15Mar 30, 2022Updated 4 years ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Windows Persistence Toolkit in C#☆37Sep 23, 2022Updated 4 years ago
- Control Panel and Builder (Working)☆10Apr 15, 2017Updated 9 years ago
- Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.…☆143Aug 16, 2021Updated 5 years ago
- Walks the Process' VAD list to grab the PTE's corresponding to a usermode virtual address, all to get the physical address☆23Nov 22, 2021Updated 4 years ago
- DefCon Red Team Village 2023 Workshop on DLL Sideloading☆19Aug 15, 2023Updated 3 years ago
- A VMBR (Virtual-Machine Based Rootkit) which runs a guest OS and sends the attacker its data☆30Apr 27, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- WslinkClient is a client intended to communicate with Wslink, which is a unique loader running as a server☆13Oct 26, 2021Updated 5 years ago
- Excel Add In Payload Generator☆15Oct 9, 2023Updated 3 years ago
- PoC XLL builder in Python/Nim☆50Nov 21, 2022Updated 3 years ago
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆35Sep 15, 2022Updated 4 years ago
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆38Aug 8, 2022Updated 4 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago