JetP1ane / Artemis

Related projects: ⓘ

• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆34Updated 9 months ago
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆52Updated last year
• hackerhouse-opensource / envschtasksuacbypass
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆53Updated 2 years ago
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆29Updated 2 years ago
• aahmad097 / MMFCodeInjection
  ☆58Updated this week
• shantanu561993 / DLL-Sideload
  ☆37Updated last year
• florylsk / AmsiBypass123
  ☆12Updated last year
• Meowmycks / etwunhook
  Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
  ☆41Updated 6 months ago
• xpn / ObjectOverloadingPOC
  ☆58Updated 2 years ago
• Allevon412 / BreadManModuleStomping
  ☆38Updated 11 months ago
• D1rkMtr / AmsiScanBuffer
  ☆38Updated this week
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆93Updated last year
• Cobalt-Strike / obfuscator-llvm
  ☆37Updated 8 months ago
• GetRektBoy724 / SyscallShuffler
  Your NTDLL vaccine from modern direct syscall methods.
  ☆35Updated 2 years ago
• dosxuz / PerunsFart
  This is my own implementation of the Perun's Fart technique by Sektor7
  ☆64Updated 2 years ago
• MrAle98 / BOF-RunPE
  ☆50Updated last year
• trustedsec / Windows-MS-LSAT-RPC-Example
  Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD
  ☆24Updated 8 months ago
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆41Updated 2 years ago
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆30Updated 2 years ago
• Hagrid29 / herpaderply_hollowing
  Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
  ☆45Updated last year
• WKL-Sec / StackMask
  A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
  ☆55Updated last year
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆33Updated last year
• dxxzero / rusty_drivers
  BYOVD collection
  ☆19Updated 5 months ago
• ORCA666 / KCTHIJACK
  ☆43Updated this week
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆53Updated 2 years ago
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆31Updated last year
• inb1ts / birdnet-poc
  Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.
  ☆37Updated last year
• waawaa / breakcyserver
  ☆43Updated 2 years ago
• D1rkMtr / SSN_Resolver
  ☆29Updated this week
• ShorSec / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆18Updated last year