NUL0x4C / NoRunPI
Run Your Payload Without Running Your Payload
☆180Updated 2 years ago
Alternatives and similar repositories for NoRunPI:
Users that are interested in NoRunPI are comparing it to the libraries listed below
- ☆180Updated last year
- Patching AmsiOpenSession by forcing an error branching☆143Updated last year
- Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…☆176Updated last year
- POC for frustrating/defeating Malware Analysts☆154Updated 2 years ago
- Execute shellcode files with rundll32☆190Updated last year
- Infect Shared Files In Memory for Lateral Movement☆193Updated 2 years ago
- A tool for converting SysWhispers3 syscalls for use with Nim projects☆143Updated 2 years ago
- Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak☆196Updated 2 years ago
- Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).☆135Updated 2 years ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆109Updated last year
- Patch AMSI and ETW☆236Updated 9 months ago
- (Demo) 3rd party agent for Havoc☆133Updated last year
- .NET assembly loader with patchless AMSI and ETW bypass☆313Updated last year
- My implementation of the GIUDA project in C++☆167Updated last year
- Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low…☆133Updated last year
- Evasive Golang Loader☆131Updated 6 months ago
- ☆107Updated last year
- ☆120Updated last year
- random code snippets, useful for getting started☆116Updated 3 months ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆147Updated last year
- An App Domain Manager Injection DLL PoC on steroids☆164Updated last year
- Weaponized HellsGate/SigFlip☆198Updated last year
- POC tool to convert CobaltStrike BOF files to raw shellcode☆187Updated 3 years ago
- PE obfuscator with Evasion in mind☆214Updated last year
- This repository implements Threadless Injection in C☆159Updated last year
- Github as C2 Demonstration , free API = free C2 Infrastructure☆134Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated last year
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆180Updated last year
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆173Updated 11 months ago
- Your syscall factory☆120Updated last month