ProcessusT / LoadThat-PEandAssemblyLinks
2 PE Loader tools that load a PE from memory, decrypt it and make some magic things to execute seamlessly from memory
☆40Updated 2 months ago
Alternatives and similar repositories for LoadThat-PEandAssembly
Users that are interested in LoadThat-PEandAssembly are comparing it to the libraries listed below
Sorting:
- Encode shellcode into dictionary words for evasion and entropy reduction☆38Updated last month
- Good CLR Host with Native patchless AMSI Bypass☆98Updated 8 months ago
- ☆151Updated 2 years ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆83Updated last year
- Create Anti-Copy DRM Malware☆70Updated last year
- lsassdump via RtlCreateProcessReflection and NanoDump☆84Updated last year
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆101Updated last year
- Basic interactive Windows kernel offensive toolkit written in C☆135Updated 3 months ago
- Shellcode loader☆98Updated last year
- ApexLdr is a DLL Payload Loader written in C☆116Updated last year
- Malware?☆76Updated 2 months ago
- ☆122Updated 2 years ago
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆102Updated 2 years ago
- A Mythic agent for Windows written in C☆151Updated this week
- Terminate AV/EDR leveraging BYOVD attack☆102Updated 9 months ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated 2 years ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61Updated 8 months ago
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆124Updated 2 years ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆119Updated 6 months ago
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆66Updated 2 years ago
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆145Updated 11 months ago
- Охотник (Hunter) is a simple Adversary Simulation tool developed for achieves stealth through API unhooking, direct and indirect syscalls…☆90Updated 8 months ago
- 「⚠️」Performing a BYOVD on the truesight.sys driver☆44Updated last year
- Do some DLL SideLoading magic☆89Updated 2 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆196Updated 11 months ago
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆122Updated last year
- ☆147Updated last year
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆50Updated last year
- Generate an Alphabetical Polymorphic Shellcode☆136Updated 4 months ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆162Updated 2 years ago