Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode
☆207May 28, 2024Updated 2 years ago
Alternatives and similar repositories for DllMainHijacking
Users that are interested in DllMainHijacking are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 寻找可利用的白文件☆563Aug 18, 2025Updated last year
- A tool for automatic patch shellcode into binary file to bypass AV. / 一个自动patch shellcode到二进制文件的工具☆580Sep 17, 2026Updated last month
- 使用Visral Studio开发ShellCode☆239Oct 11, 2023Updated 3 years ago
- 添加计划任务方法集合☆313Aug 6, 2023Updated 3 years ago
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆185Aug 3, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Take a screenshot without injection for Cobalt Strike☆203Jun 7, 2023Updated 3 years ago
- 自动化找白文件，用于扫描 EXE 文件的导入表，列出导入的DLL文件，并筛选出非系统DLL，符合条件的文件将被复制到特定的 X64 或 X86 文件夹☆641Mar 24, 2026Updated 7 months ago
- Pillager是一个适用于后渗透期间的信息收集工具☆1,296Sep 7, 2024Updated 2 years ago
- Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术，不使用API进行主线程劫持，不使用PEB…☆93Jul 26, 2025Updated last year
- 一款基于PE Patch技术的后渗透免杀工具，主要支持x64☆349Mar 5, 2025Updated last year
- Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…☆1,323Jun 21, 2024Updated 2 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆77Mar 16, 2026Updated 7 months ago
- 针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and…☆286Aug 20, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 使用 rust 实现 CobaltStrike 的 beacon || Using Rust to implement CobaltStrike's Beacon☆207Jul 5, 2025Updated last year
- 白文件patch☆27Aug 14, 2024Updated 2 years ago
- Process injection alternative☆404Sep 6, 2024Updated 2 years ago
- 基于 OPSEC 的 CobaltStrike 后渗透自动化链☆447Mar 11, 2024Updated 2 years ago
- A beacon object file implementation of PoolParty Process Injection Technique.☆461Dec 21, 2023Updated 2 years ago
- 基于个人习惯使用C/C++的shellcode开发项目模板☆49Aug 20, 2024Updated 2 years ago
- 渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理☆1,392Feb 28, 2025Updated last year
- 收集云沙箱上线C2的ip，如微X、奇XX、3X0、virustX等☆124Oct 23, 2023Updated 3 years ago
- SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature…☆1,299Aug 27, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 白加黑的快速生成器（针对IAT类型）☆116Sep 19, 2022Updated 4 years ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）☆140Dec 26, 2023Updated 2 years ago
- A little tool to play with Windows security☆12Jan 21, 2026Updated 9 months ago
- Bypassing UAC with SSPI Datagram Contexts☆474Sep 24, 2023Updated 3 years ago
- A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.☆42May 9, 2024Updated 2 years ago
- 免杀与恶意软件开发☆257Jan 4, 2026Updated 9 months ago
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆289Jul 17, 2025Updated last year
- A simple Sleepmask BOF example☆181Nov 24, 2025Updated 11 months ago
- 一个浏览器数据（密码|历史记录|Cookie|书签|下载记录）的导出工具，支持主流浏览器。☆796Nov 15, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- golang 实现的windows and linux 端口复用工具。☆311Jan 30, 2024Updated 2 years ago
- An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memor…☆509Jul 28, 2026Updated 3 months ago
- 通过生成不同hash的ico并写入程序中，实现批量bypass360QVM☆259Aug 10, 2023Updated 3 years ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆643Jan 2, 2025Updated last year
- Automated Hosting Information Hunting Tool - Windows 主机信息自动化狩猎工具☆558Apr 15, 2025Updated last year
- For when DLLMain is the only way☆439Oct 29, 2024Updated 2 years ago
- 本项目是一个远程控制应用，使用 Golang 开发，允许用户通过 Web 界面远程控制和屏幕监控其他计算机。主要功能包括屏幕共享、鼠标和键盘控制以及键盘记录。☆490Jan 30, 2026Updated 9 months ago