ProcessusT / LoadThat-PEandAssemblyLinks
2 PE Loader tools that load a PE from memory, decrypt it and make some magic things to execute seamlessly from memory
☆48Updated 3 months ago
Alternatives and similar repositories for LoadThat-PEandAssembly
Users that are interested in LoadThat-PEandAssembly are comparing it to the libraries listed below
Sorting:
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆102Updated 2 years ago
- Good CLR Host with Native patchless AMSI Bypass☆101Updated 9 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆113Updated last month
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆121Updated 6 months ago
- ☆54Updated 3 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆131Updated this week
- 「⚠️」Performing a BYOVD on the truesight.sys driver☆44Updated last year
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆66Updated 2 years ago
- Bypass user-land hooks by syscall tampering via the Trap Flag☆138Updated 5 months ago
- This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.☆90Updated 9 months ago
- Encode shellcode into dictionary words for evasion and entropy reduction☆40Updated last month
- Dynamic shellcode loader with sophisticated evasion capabilities☆282Updated 4 months ago
- ☆109Updated 11 months ago
- Stage 0☆169Updated last year
- Generate an Alphabetical Polymorphic Shellcode☆135Updated 5 months ago
- Lateral movement with DCOM DLL hijacking☆176Updated 7 months ago
- D/Invoke standalone shellcode runners☆39Updated 2 years ago
- The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.☆27Updated last year
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆50Updated last year
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆89Updated 11 months ago
- New 0 day vulnerability allowing to leak NTLM hashes from browsers with one click☆206Updated 2 months ago
- ☆151Updated 2 years ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆195Updated last year
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆165Updated 3 weeks ago
- ☆159Updated last year
- Advanced Windows authentication token extraction and decryption tool for red team operations and security research☆83Updated last month
- A tool for coercing and relaying Kerberos authentication over DCOM and RPC.☆146Updated 6 months ago
- Just another EDR killer☆88Updated 2 weeks ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆118Updated last year
- Evasive Payload Delivery Server & C2 Redirector☆112Updated 3 months ago