This exploit use PEB walk technique to resolve API calls dynamically, obfuscate all API calls to perform process injection.
☆27Jul 26, 2024Updated 2 years ago
Alternatives and similar repositories for PEB_WALK_AND_API_OBFUSCATION_INJECTION
Users that are interested in PEB_WALK_AND_API_OBFUSCATION_INJECTION are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Script made for bypassing antivirus using Powershell Injection method. Place your shellcode from msfvenom on line 15, the script can be c…☆15Jun 14, 2023Updated 3 years ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆29Sep 18, 2024Updated 2 years ago
- Change hash for a signed pe☆18Jul 18, 2023Updated 3 years ago
- ☆12Apr 5, 2024Updated 2 years ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆50May 8, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- This central repository is crafted for cybersecurity enthusiasts, researchers, and professionals aiming to advance their skills. It offer…☆23Jun 10, 2026Updated 4 months ago
- Small project to facilitate creation of .lnk payloads☆84Nov 18, 2022Updated 3 years ago
- A simple present scene, kernel allocation injector.☆28Jun 12, 2022Updated 4 years ago
- A basic exemple of the API-Hashing method used by Red Teamers but also by malwares developers in C++☆36Jan 10, 2024Updated 2 years ago
- Library of BOFs to interact with SQL servers☆14Dec 6, 2024Updated last year
- A tool that parses the function trace of IDA that executes VMProtect.☆12Mar 12, 2024Updated 2 years ago
- Binary Ninja plugin to deobfuscate strings obfuscated with the Garble project☆45Mar 6, 2025Updated last year
- Beacon Object File implementation of Yaxser's Backstab☆15Mar 9, 2022Updated 4 years ago
- [UNMAINTAINED] python scripts to help analzye go binaries in radare2☆11Feb 2, 2017Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- GDI Render in kernelmode☆10Mar 7, 2020Updated 6 years ago
- EventViewer Bypass Uac Bof☆22Jul 23, 2022Updated 4 years ago
- Simple tool to dump/hide services in services.exe process.☆23Apr 22, 2022Updated 4 years ago
- This exploit is utilising AddressOfEntryPoint of process which is RX and using WriteProcessMemory internal magic to change the permission…☆20Oct 31, 2024Updated last year
- AIDA64DRIVER Elevation of Privilege Vulnerability☆17Oct 25, 2024Updated 2 years ago
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆28Jun 14, 2024Updated 2 years ago
- This repository provides a simple project demonstrating how to hook BitBlt from gdi32.dll to capture clean screenshots of game windows. B…☆45Jun 23, 2026Updated 4 months ago
- ☆12Jan 17, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- SharpDPAPI ported to Cobalt Strike BOFs — 19 self-contained BOFs for DPAPI credential triage☆18Feb 24, 2026Updated 8 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆40Jul 12, 2024Updated 2 years ago
- This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead…☆168Jun 10, 2026Updated 4 months ago
- ☆10May 1, 2022Updated 4 years ago
- W/RPM Driver and usermode for Linux☆20Oct 31, 2023Updated 3 years ago
- Reproducible BinProv implementation and pretrained model for binary compilation provenance identification without disassembly.☆10Sep 6, 2026Updated last month
- Linux Process Injection via Seccomp Notifier☆95Dec 9, 2025Updated 10 months ago
- PE obfuscator with Evasion in mind☆210Apr 25, 2023Updated 3 years ago
- Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijac…☆275Oct 31, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- In this repository, I will store my scripts that I create to automate some processes during some Reverse Engineering tasks. Some scripts…☆14Oct 18, 2026Updated last week
- CVE-2026-24294 PoC☆62Apr 30, 2026Updated 6 months ago
- Bunch of BOF files☆46Jun 30, 2025Updated last year
- Collection of random RedTeam scripts.☆212Mar 8, 2024Updated 2 years ago
- Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.☆294May 27, 2024Updated 2 years ago
- ☆10Mar 24, 2026Updated 7 months ago
- CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)☆30Dec 31, 2021Updated 4 years ago