This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.
☆26Jul 26, 2024Updated last year
Alternatives and similar repositories for PEB_WALK_AND_API_OBFUSCATION_INJECTION
Users that are interested in PEB_WALK_AND_API_OBFUSCATION_INJECTION are comparing it to the libraries listed below
Sorting:
- Script made for bypassing antivirus using Powershell Injection method. Place your shellcode from msfvenom on line 15, the script can be c…☆15Jun 14, 2023Updated 2 years ago
- Library of BOFs to interact with SQL servers☆16Dec 6, 2024Updated last year
- Change hash for a signed pe☆17Jul 18, 2023Updated 2 years ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆28Sep 18, 2024Updated last year
- EventViewer Bypass Uac Bof☆23Jul 23, 2022Updated 3 years ago
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Jun 14, 2024Updated last year
- NativePayload_TiACBT (Remote Thread Injection + C# Async Method + CallBack Functions Technique)☆13Jun 6, 2023Updated 2 years ago
- This is a VxLAN PoC code for Talks: From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion☆28Jul 21, 2025Updated 7 months ago
- This repository provides a simple project demonstrating how to hook BitBlt from gdi32.dll to capture clean screenshots of game windows. B…☆32Sep 26, 2024Updated last year
- A simple present scene, kernel allocation injector.☆27Jun 12, 2022Updated 3 years ago
- .NET assembly loader with patching AMSI and ETW bypass☆31Apr 16, 2025Updated 10 months ago
- Small project to facilitate creation of .lnk payloads☆80Nov 18, 2022Updated 3 years ago
- 一个界面基于IMGUI的ARK，目前R3实现☆13Nov 1, 2023Updated 2 years ago
- This exploit is utilising AddressOfEntryPoint of process which is RX and using WriteProcessMemory internal magic to change the permission…☆18Oct 31, 2024Updated last year
- BOF to terminate a process via PID as argument☆28Sep 7, 2025Updated 5 months ago
- A basic exemple of the API-Hashing method used by Red Teamers but also by malwares developers in C++☆37Jan 10, 2024Updated 2 years ago
- Use COM Component Bypass UAC,Dll Version☆36Apr 17, 2021Updated 4 years ago
- Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijac…☆270Oct 31, 2024Updated last year
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆19Apr 24, 2023Updated 2 years ago
- This script dynamically decodes and executes a Base64 encoded Mimikatz script, allowing users to bypass security measures and run specifi…☆21Jul 9, 2024Updated last year
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆17Jul 22, 2022Updated 3 years ago
- ☆35Dec 4, 2025Updated 2 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Jul 12, 2024Updated last year
- ☆17Dec 18, 2020Updated 5 years ago
- Written in a couple hours, don't judge :)☆17Jun 3, 2023Updated 2 years ago
- ☆22Jun 17, 2020Updated 5 years ago
- an Improoved Version of 0xNinjaCyclone´s EarlyCascade Code☆22Feb 20, 2025Updated last year
- Cobalt Strike BOFS☆16Dec 20, 2023Updated 2 years ago
- Collection of random RedTeam scripts.☆211Mar 8, 2024Updated last year
- Executes Read/Write process memory with `NtQueryCompositionSurfaceStatistics`☆23Feb 10, 2024Updated 2 years ago
- ☆24Jul 15, 2023Updated 2 years ago
- Beacon Object File implementation of Yaxser's Backstab☆15Mar 9, 2022Updated 3 years ago
- shamelessly ripped from https://github.com/khalilbijjou/WAFNinja/☆19Dec 16, 2016Updated 9 years ago
- Use GDI in KernelMode☆26Oct 1, 2022Updated 3 years ago
- Dump LSASS by spoofing command line arguments to procdump.☆20Oct 21, 2024Updated last year
- Python module for running BOFs☆79Nov 28, 2025Updated 2 months ago
- How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver☆26May 29, 2023Updated 2 years ago
- ☆10May 25, 2018Updated 7 years ago
- Kernel Driver which can be used to read guarded regions, read/write/ protect/ or allocate memory in desired process!☆18Jan 8, 2026Updated last month