NVISOsecurity / codasmLinks
Payload encoding utility to effectively lower payload entropy.
☆116Updated last month
Alternatives and similar repositories for codasm
Users that are interested in codasm are comparing it to the libraries listed below
Sorting:
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆99Updated 3 weeks ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆264Updated 8 months ago
- Windows rootkit designed to work with BYOVD exploits☆198Updated 4 months ago
- "Service-less" driver loading☆155Updated 6 months ago
- Bypass LSA protection using the BYODLL technique☆161Updated 8 months ago
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆161Updated last year
- A Mythic Agent written in PIC C.☆188Updated 4 months ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆89Updated 11 months ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆212Updated 3 months ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆187Updated 6 months ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆182Updated 3 months ago
- Stage 0☆160Updated 5 months ago
- Sleep obfuscation☆224Updated 5 months ago
- A set of programs for analyzing common vulnerabilities in COM☆215Updated 8 months ago
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆85Updated 2 years ago
- Local & remote Windows DLL Proxying☆164Updated 11 months ago
- A collection of position independent coding resources☆78Updated 3 months ago
- Playing around with Thread Context Hijacking. Building more evasive primitives to use as alternative for existing process injection techn…☆159Updated 3 weeks ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- ☆155Updated 5 months ago
- early cascade injection PoC based on Outflanks blog post☆218Updated 6 months ago
- Activation Context Hijack☆155Updated 6 months ago
- Exploitation of process killer drivers☆201Updated last year
- 64-bit, position-independent implant template for Windows in Rust.☆130Updated last month
- Template-based generation of shellcode loaders☆77Updated last year
- Blocks EDR Telemetry by performing Person-in-the-Middle attack where network filtering is applied using iptables. The blocked destination…☆141Updated 10 months ago
- Injecting DLL into LSASS at boot☆113Updated last month
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆109Updated 8 months ago
- Zero EAT touch way to retrieve function addresses (GetProcAddress on steroids)☆141Updated last year
- Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak☆205Updated 2 years ago