ProcessusT / CobaltStrikeBypassDefender
A launcher to load a DLL with xored cobalt strike shellcode executed in memory through process hollowing technique
☆26Updated 2 years ago
Alternatives and similar repositories for CobaltStrikeBypassDefender
Users that are interested in CobaltStrikeBypassDefender are comparing it to the libraries listed below
Sorting:
- Classic Process Injection with Memory Evasion Techniques implemantation☆69Updated last year
- Custom Python shellcode encryptor and obfuscator☆12Updated last year
- This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for loc…☆51Updated 2 years ago
- A method to execute shellcode using RegisterWaitForInputIdle API.☆53Updated 2 years ago
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆100Updated 2 years ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆24Updated 7 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- A small Aggressor script to help Red Teams identify foreign processes on a host machine☆85Updated 2 years ago
- API Hammering with C++20☆47Updated 2 years ago
- These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be…☆19Updated last year
- PDF Icon File Type Spoofer☆14Updated 10 months ago
- Various methods of executing shellcode☆70Updated 2 years ago
- ☆36Updated 2 years ago
- PowerShell script to terminate protected processes such as anti-malware and EDRs.☆26Updated last year
- ☆71Updated last year
- Just another Process Injection using Process Hollowing technique.☆17Updated last year
- The Web UI for Antnium☆27Updated 2 years ago
- A simple C++ Windows tool to get information about processes exposing named pipes.☆37Updated 2 months ago
- EmbedExeLnk by x86matthew modified by d4rkiZ☆42Updated 2 years ago
- C# havoc implant☆99Updated 2 years ago
- ☆55Updated 6 months ago
- Section-based payload obfuscation technique for x64☆59Updated 9 months ago
- ☆40Updated 2 years ago
- DLL Exports Extraction BOF with optional NTFS transactions.☆82Updated 3 years ago
- Tool for playing with Windows Access Token manipulation.☆54Updated 2 years ago
- Just another ntdll unhooking using Parun's Fart technique☆75Updated 2 years ago
- ☆34Updated last month
- Create Anti-Copy DRM Malware☆56Updated 8 months ago
- Cortex EDR Ransomware protection Bypass☆21Updated 3 months ago
- ☆123Updated last year