NUL0x4C / NoRunPI
Run Your Payload Without Running Your Payload
☆181Updated 2 years ago
Alternatives and similar repositories for NoRunPI:
Users that are interested in NoRunPI are comparing it to the libraries listed below
- POC for frustrating/defeating Malware Analysts☆154Updated 2 years ago
- Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak☆204Updated 2 years ago
- A tool for converting SysWhispers3 syscalls for use with Nim projects☆146Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated last year
- Infect Shared Files In Memory for Lateral Movement☆194Updated 2 years ago
- Patching AmsiOpenSession by forcing an error branching☆145Updated last year
- Execute shellcode files with rundll32☆199Updated last year
- ☆180Updated last year
- ☆116Updated last year
- (Demo) 3rd party agent for Havoc☆137Updated last year
- Do some DLL SideLoading magic☆82Updated last year
- Patch AMSI and ETW☆236Updated 11 months ago
- Execute shellcode from a remote-hosted bin file using Winhttp.☆233Updated last year
- PE obfuscator with Evasion in mind☆213Updated last year
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated last year
- ☆164Updated last year
- WIP shellcode loader in nim with EDR evasion techniques☆211Updated 3 years ago
- Weaponized HellsGate/SigFlip☆199Updated last year
- Lateral Movement Using DCOM and DLL Hijacking☆289Updated last year
- Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).☆139Updated 2 years ago
- An App Domain Manager Injection DLL PoC on steroids☆169Updated last year
- POC tool to convert CobaltStrike BOF files to raw shellcode☆192Updated 3 years ago
- ☆300Updated last year
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆253Updated last year
- My implementation of the GIUDA project in C++☆180Updated last year
- Beacon Object File Loader☆286Updated last year
- Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctype…☆114Updated last year
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆226Updated last year
- A basic emulation of an "RPC Backdoor"☆239Updated 2 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆170Updated 2 years ago