MerlynXS / Pegasus-Pantheon-HVNC-V2-VNC-Hidden-Browser-Remote-Administration-Rat

Related projects: ⓘ

• CryptoBreach / UnhookPoC
  A small PoC using DInvoke, dynamically mapping a DLL and executing Win32 APIs for process injection.
  ☆10Updated 2 years ago
• TomOS3 / UserModeUnhooking
  This project is created for research into antivirus evasion by unhooking.
  ☆15Updated 3 years ago
• eversinc33 / crystalc2
  ☆13Updated this week
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆53Updated 2 years ago
• OtterHacker / CoffLoader
  ☆48Updated last year
• MerlynXS / S-500-G2-Rat-Hvnc-Hidden-Broswers-Hidden-Apps-OperaGX-Rat-Remote-Malware
  ☆57Updated this week
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆29Updated 2 years ago
• timwhitez / Doge-Obf
  golang String Obfuscate
  ☆9Updated 2 years ago
• bopin2020 / ProcessInjecting
  ☆11Updated this week
• Narumiii / phantommap
  Phantom DLL Hollowing method implemented in modmap
  ☆17Updated 3 years ago
• aaaddress1 / knownDlls_Poison
  ☆26Updated 2 years ago
• matthieu-hackwitharts / UnhookMe
  Cobaltstrike BOF to unhook any Nt api
  ☆14Updated last year
• GetRektBoy724 / SysGate
  One gate to all syscalls!
  ☆23Updated 2 years ago
• oxfemale / ComObjShellcodeLoader
  ComObject Shellcode Loader with fake return address
  ☆12Updated 2 years ago
• klezVirus / AsStrongAsFuck
  A console obfuscator for .NET assemblies.
  ☆10Updated last year
• nblog / shellcode_execute
  ☆9Updated 7 months ago
• wilszdev / GetTrustedInstallerShell
  impersonate trustedinstaller by fiddling with tokens
  ☆16Updated 3 years ago
• timwhitez / Doge-RL
  Reflective DLL injection Execution
  ☆19Updated 2 years ago
• bharadwajyas / ppdump-public
  Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…
  ☆23Updated 4 years ago
• quiggleypuff / EvilProfiler
  Simple .NET profiler shellcode loader
  ☆10Updated 2 years ago
• w1u0u1 / Dll2Shellcode
  Convert native dll to shellcode, and support exported function
  ☆22Updated 3 years ago
• timwhitez / Doge-Unhook
  DLL Unhooking
  ☆12Updated 3 years ago
• TheKevinWang / HellsRunPE
  RunPE using Hell's Gate technique.
  ☆30Updated 3 years ago
• clod81 / loader_process_hollow_copy_in_chunk
  About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once
  ☆12Updated 2 years ago
• realoriginal / doublepulsar
  An unfinished DOUBLEPULSAR clone. Set to be redone at a later date
  ☆13Updated last year
• w1u0u1 / nanodump
  A flexible tool that creates a minidump of the LSASS process
  ☆12Updated 2 years ago
• Gr1mmie / SharpShellCodeObfus
  Caeser Cipher your shellcode!
  ☆20Updated 2 years ago
• GetRektBoy724 / Breaking-Detecting-Direct-Syscall-Techniques
  A repository filled with ideas to break/detect direct syscall techniques
  ☆26Updated 2 years ago
• VirtualAlllocEx / C2-Traffic-Redirection
  ☆13Updated this week
• arsium / BypassGetModuleBaseAddressAndGetExportAddress
  A proof of concept of real custom GetProcAddress and GetModuleBaseAddress
  ☆19Updated 2 years ago