PoC for detecting and evading ETW detection of .Net Assembly.Load
☆22Aug 26, 2020Updated 6 years ago
Alternatives and similar repositories for HidingFromETW
Users that are interested in HidingFromETW are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Use GZip to compress your .NET assemblies for loading with AssemblyResolve.☆20Apr 11, 2014Updated 12 years ago
- Playing with PE's and Building Structures by Hand☆22Apr 21, 2022Updated 4 years ago
- A port of classic netcat to C#☆34Jan 21, 2023Updated 3 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Aug 12, 2022Updated 4 years ago
- It's what all the kids are talking about☆11Apr 25, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆13Sep 22, 2019Updated 7 years ago
- ☆12Apr 7, 2022Updated 4 years ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆88Nov 24, 2022Updated 3 years ago
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- string encryption in Nim☆19Jun 15, 2024Updated 2 years ago
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆38Aug 8, 2022Updated 4 years ago
- AppXSVC Service race condition - privilege escalation☆29Jul 30, 2019Updated 7 years ago
- various methods of making API calls☆19Feb 1, 2025Updated last year
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- just manipulatin these here tokens yes sir nothing weird☆21Apr 18, 2022Updated 4 years ago
- A custom run space to bypass AMSI and Constrained Language mode in PowerShell.☆20May 17, 2023Updated 3 years ago
- Simple and sane compression wrapper library.☆19Oct 28, 2022Updated 4 years ago
- Proof of Concept code and samples presenting emerging threat of MSI installer files.☆94Dec 15, 2022Updated 3 years ago
- A small example of loading BOFs in Python with pure reflection☆19Jan 26, 2023Updated 3 years ago
- List/Read contents of Zip files (in memory and without extraction) using CobaltStrike's Execute-Assembly☆61May 24, 2022Updated 4 years ago
- A quick and dirty way to bypass encrypted EPA to connect to a NetScaler Gateway☆20Oct 11, 2019Updated 7 years ago
- Injection of MSIL using Cecil☆12Jul 28, 2015Updated 11 years ago
- Infect Shared Files In Memory for Lateral Movement☆189Dec 14, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)☆65Nov 13, 2022Updated 3 years ago
- Remote code execution in Power Platform connectors via JSON deserialization☆23Mar 30, 2023Updated 3 years ago
- Small handy tool for crafting shellcodes by hand.☆18Apr 20, 2022Updated 4 years ago
- ☆31Aug 23, 2020Updated 6 years ago
- Execute embedded Mimikatz☆13Nov 24, 2021Updated 4 years ago
- C# Data Collector for BloodHound with CobaltStrike integration (BOF.NET)☆61Apr 13, 2023Updated 3 years ago
- This repo hosts a poc of how to execute F# code within an unmanaged process☆71Jun 25, 2024Updated 2 years ago
- A generator for malicious DLL files for DLL Hijacking attacks☆33Dec 6, 2019Updated 6 years ago
- Unbind port 445/tcp on Windows☆14Jul 11, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A basic emulation of an "RPC Backdoor"☆242Aug 25, 2022Updated 4 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- Read Memory without ReadProcessMemory for Current Process☆88Feb 13, 2022Updated 4 years ago
- demo unhooking functions in ntdll☆27Jul 15, 2025Updated last year
- ☆39Sep 26, 2022Updated 4 years ago
- ☆14Aug 26, 2021Updated 5 years ago
- Some stuff for PHD2021☆14May 21, 2025Updated last year