Offensive-Panda / on-disk-detection-bypass

Related projects: ⓘ

• susMdT / AceLdr
  Cobalt Strike UDRL for memory scanner evasion.
  ☆34Updated 9 months ago
• passthehashbrowns / BOFMask
  ☆105Updated last year
• SaadAhla / D1rkSleep
  Improved version of EKKO by @5pider that Encrypts only Image Sections
  ☆110Updated last year
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆76Updated last year
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆85Updated 7 months ago
• EspressoCake / Defender-Exclusions-Creator-BOF
  ☆73Updated 10 months ago
• xforcered / BOFMask
  ☆116Updated last year
• werdhaihai / SharpAltShellCodeExec
  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke
  ☆74Updated last year
• deh00ni / NtDumpBOF
  ☆79Updated 2 weeks ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆52Updated last month
• EvilGreys / XLL-DROPPER-
  ☆28Updated this week
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆106Updated 2 years ago
• 0xHossam / HuffLoader
  Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader
  ☆75Updated 6 months ago
• wsummerhill / DictionShellcode
  Encode shellcode into dictionary words for evasion and entropy reduction
  ☆13Updated 2 months ago
• trustedsec / PPLFaultDumpBOF
  ☆132Updated last year
• Octoberfest7 / enumhandles_BOF
  ☆99Updated 2 weeks ago
• gerbsec / SmokeyObfuscator
  Rewrite to fit my needs
  ☆25Updated 2 months ago
• MaorSabag / SideLoadingDLL
  Do some DLL SideLoading magic
  ☆72Updated last year
• vatsalgupta67 / Process-Hollowing
  Red Team Operation's Defense Evasion Technique.
  ☆50Updated 3 months ago
• rasta-mouse / PPEnum
  Simple BOF to read the protection level of a process
  ☆101Updated last year
• itaymigdal / PartyLoader
  Threadless shellcode injection tool
  ☆56Updated last month
• securityandstuff / DynamicFinder
  ☆65Updated this week
• sexyiam / UAC-Bypass
  UAC Bypass via CMUACUtil & PEB Enumeration, Undetected for now.
  ☆44Updated 4 months ago
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆20Updated last year
• Octoberfest7 / JumpSession_BOF
  Beacon Object File allowing creation of Beacons in different sessions.
  ☆73Updated 2 years ago
• ewby / Mockingjay_BOF
  Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique
  ☆147Updated 10 months ago
• eladshamir / SharpElevator
  SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and publishe…
  ☆47Updated 2 years ago
• parzel / GoSleepyCrypt
  In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
  ☆39Updated 8 months ago
• VoldeSec / PatchlessInlineExecute-Assembly
  Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.
  ☆143Updated last year
• williamknows / BOF.NET
  A .NET Runtime for Cobalt Strike's Beacon Object Files
  ☆57Updated 8 months ago