Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.
☆128Apr 24, 2022Updated 4 years ago
Alternatives and similar repositories for Mutants_Sessions_Self-Deletion
Users that are interested in Mutants_Sessions_Self-Deletion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs☆187Oct 3, 2021Updated 4 years ago
- Beacon Object File allowing creation of Beacons in different sessions.☆84May 23, 2022Updated 4 years ago
- A simple BOF that frees UDRLs☆124May 29, 2022Updated 4 years ago
- It stinks☆101Apr 22, 2022Updated 4 years ago
- Beacon Object File implementation of Event Viewer deserialization UAC bypass☆133May 6, 2022Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- POC for frustrating/defeating Malware Analysts☆154Jun 12, 2022Updated 4 years ago
- BOF combination of KillDefender and Backstab☆170Mar 23, 2023Updated 3 years ago
- Section Mapping Process Injection (secinject): Cobalt Strike BOF☆105Jan 7, 2022Updated 4 years ago
- Beacon Object File Loader☆293Dec 3, 2023Updated 2 years ago
- COFF and BOF Loader written in Nim☆177Apr 4, 2026Updated 5 months ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆116Feb 27, 2021Updated 5 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 4 years ago
- A PoC project for embedding shellcode to Hint/Name Table☆114Apr 4, 2026Updated 5 months ago
- ☆357May 16, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆155Jan 6, 2023Updated 3 years ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆143Sep 12, 2022Updated 3 years ago
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆97Mar 8, 2023Updated 3 years ago
- Just some Rust process injector POCs, nothing weird.☆78Mar 6, 2022Updated 4 years ago
- Load and execute COFF files and Cobalt Strike BOFs in-memory☆228Sep 13, 2022Updated 3 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR☆157Jul 22, 2021Updated 5 years ago
- Inject .NET assemblies into an existing process☆509Jan 19, 2022Updated 4 years ago
- In-memory token vault BOF for Cobalt Strike☆151Aug 18, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆541Aug 1, 2022Updated 4 years ago
- A BOF to interact with COM objects associated with the Windows software firewall.☆114Oct 10, 2021Updated 4 years ago
- ☆143May 4, 2022Updated 4 years ago
- Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2☆185Jul 21, 2022Updated 4 years ago
- ☆170Jan 7, 2022Updated 4 years ago
- Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used☆90Aug 26, 2021Updated 5 years ago
- Beacon Object File & C# project to check LDAP signing☆204Aug 7, 2024Updated 2 years ago
- XLL Phishing Tradecraft☆440May 24, 2022Updated 4 years ago
- ☆652Jul 21, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A small PoC that creates processes in Windows☆190Jun 6, 2024Updated 2 years ago
- Remote operations commands implemented using Beacon Object Files☆1,183Jul 20, 2026Updated last month
- Cobalt Strike UDRL for memory scanner evasion.☆1,031Jun 4, 2024Updated 2 years ago
- A BOF to determine Windows Defender exclusions.☆257Jun 25, 2023Updated 3 years ago
- KaynLdr is a Reflective Loader written in C/ASM☆552Dec 3, 2023Updated 2 years ago
- Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique☆337Jan 16, 2022Updated 4 years ago
- Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon☆339Jun 6, 2022Updated 4 years ago