Kara-4search / ProcessHollowing_CSharp

Related projects: ⓘ

• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆44Updated 3 years ago
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆52Updated last year
• Kara-4search / Simple_ShellCodeLoader_CSharp
  A Simple ShellcodeLoader
  ☆11Updated 3 years ago
• Kara-4search / EarlyBirdInjection_CSharp
  Inject shellcode into process via "EarlyBird"
  ☆24Updated 3 years ago
• GetRektBoy724 / HalosUnhooker
  Halos Gate-based NTAPI Unhooker
  ☆49Updated 2 years ago
• Kara-4search / BypassETW_CSharp
  Bypassing ETW with Csharp
  ☆25Updated 2 years ago
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆53Updated 2 years ago
• Kara-4search / FullDLLUnhooking_CSharp
  Unhook DLL via cleaning the DLL 's .text section
  ☆9Updated 3 years ago
• Kara-4search / MappingInjection_CSharp
  MappingInjection via csharp
  ☆37Updated 2 years ago
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆40Updated last year
• aahmad097 / MMFCodeInjection
  ☆58Updated this week
• Kara-4search / Fiber_ShellcodeExecution
  Using fibers to execute shellcode in a local process via csharp
  ☆28Updated 2 years ago
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆38Updated 2 years ago
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆52Updated last year
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 3 years ago
• rvrsh3ll / PELoader
  Load PE via XML Attribute
  ☆28Updated 4 years ago
• N4kedTurtle / HellsGatePoC
  ☆48Updated 4 years ago
• Allevon412 / BreadManModuleStomping
  ☆38Updated 11 months ago
• JetP1ane / Artemis
  Artemis - C++ Hell's Gate Syscall Implementation
  ☆31Updated last year
• florylsk / AmsiBypass123
  ☆12Updated last year
• eladshamir / SharpElevator
  SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and publishe…
  ☆47Updated 2 years ago
• guervild / InlineZipper
  ☆21Updated 2 years ago
• mobdk / Sigma
  Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx
  ☆14Updated 3 years ago
• boku7 / xPipe
  Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions
  ☆75Updated last year
• GetRektBoy724 / SharpHalos
  My implementation of Halo's Gate technique in C#
  ☆51Updated 2 years ago
• arsium / PELoader
  ☆21Updated last year
• TomOS3 / UserModeUnhooking
  This project is created for research into antivirus evasion by unhooking.
  ☆15Updated 3 years ago
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆29Updated 2 years ago
• thiagomayllart / DarkMelkor
  Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.
  ☆27Updated 3 years ago
• MrAle98 / BOF-RunPE
  ☆50Updated last year