Neo-Maoku / expandTextSectionLinks
A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.
☆33Updated last year
Alternatives and similar repositories for expandTextSection
Users that are interested in expandTextSection are comparing it to the libraries listed below
Sorting:
- ☆66Updated 11 months ago
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆169Updated 11 months ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆137Updated 8 months ago
- A Blind EDR Project for Educational Purposes☆40Updated 5 months ago
- 一款集成了DLL-Session0注入，APC注入，映射注入，线程劫持，函数踩踏，提权的工具(支持BIN加解密)☆137Updated 11 months ago
- Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode☆168Updated last year
- Binary Hollowing☆78Updated 10 months ago
- A C Implementation for Bypassing Security Software☆27Updated 3 months ago
- dll劫持、dll hijack、Bypass Antivirus、Red Team☆49Updated 8 months ago
- Simulate per-process disconnection in red team environments☆48Updated last month
- 一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）☆135Updated last year
- IDA Python script for generating Windows x86 shellcode with one click☆37Updated last year
- 基于个人习惯使用C/C++的shellcode开发项目模板☆42Updated 10 months ago
- beta☆118Updated 9 months ago
- hey！这里用来存放公众号中使用的代码☆9Updated last year
- 个人学习使用，二开DcRAT，主要是增加了功能性插件☆17Updated last year
- vehsyscall:a syscall project that may bypass EDR☆58Updated last year
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆71Updated 4 months ago
- 免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus☆68Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆53Updated last year
- 白文件patch☆19Updated 11 months ago
- more conveniently Visual-Studio-BOF-template☆66Updated last year
- 使用Visral Studio开发ShellCode☆208Updated last year
- 无Windows API的新型恶意程序：自缺陷程序利用堆栈溢出的隐匿稳定攻击技术研究，A new type of malicious program without Windows API☆86Updated 3 months ago
- 关于RPC一些绕EDR的tips☆188Updated 2 years ago
- A packer which adds encrypted shell to protect your PE file☆23Updated 8 months ago
- 制作 shellcode 的模板☆26Updated 8 months ago
- 自定义函数堆栈，从而绕过ETW检测，这个是完整版。☆14Updated last year
- SysWhispers3WinHttp 基于SysWhispers3项目增添WinHttp分离加载功能并使用32位GCC进行编译，文件大小14KB，可免杀绕过360核晶防护与Defender☆32Updated 2 years ago
- shellcode生成框架☆87Updated last year