ReversingID / Shellcode-Loader
Open repository for learning dynamic shellcode loading (sample in many programming languages)
☆244Updated 3 months ago
Alternatives and similar repositories for Shellcode-Loader:
Users that are interested in Shellcode-Loader are comparing it to the libraries listed below
- Loading BOF & ShellCode without executable permission memory.☆430Updated 6 months ago
- not a reverse-engineered version of the Cobalt Strike Beacon☆357Updated last year
- PE to shellcode☆191Updated 3 months ago
- POCs for Shellcode Injection via Callbacks☆406Updated 4 years ago
- GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisp…☆314Updated 7 months ago
- windows-rs shellcode loaders☆350Updated 9 months ago
- Process injection alternative☆325Updated 7 months ago
- ☆96Updated last year
- Some Service DCOM Object and SeImpersonatePrivilege abuse.☆356Updated 2 years ago
- 免杀学习笔记☆221Updated last year
- Shellcode obfuscation tool to avoid AV/EDR.☆126Updated last year
- Misc TaskScheduler Plays☆232Updated 2 years ago
- UAC bypass for x64 Windows 7 - 11（无弹窗版）☆280Updated 2 years ago
- CPP AV/EDR Killer☆403Updated last year
- Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode☆147Updated 10 months ago
- Magical obfuscator, supports obfuscating EXE, BOF, and ShellCode.☆150Updated 5 months ago
- CobaltStrike beacon written in golang☆415Updated last year
- Some POCs for my BYOVD research and find some vulnerable drivers☆193Updated 2 weeks ago
- A Beacon Object File (BOF) template for Visual Studio☆188Updated last month
- Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution☆175Updated last year
- A beacon object file implementation of PoolParty Process Injection Technique.☆380Updated last year
- Abuse Impersonate Privilege from Service to SYSTEM like other potatoes do☆371Updated 2 years ago
- Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver☆268Updated last month
- Bypassing UAC with SSPI Datagram Contexts☆433Updated last year
- A Windows potato to privesc☆365Updated 7 months ago
- 基于Tinynuke修复得到的HVNC☆160Updated 3 years ago
- An alternative screenshot capability for Cobalt Strike that uses WinAPI and does not perform a fork & run. Screenshot downloaded in memor…☆411Updated 2 weeks ago
- CrossC2 developed based on the Cobalt Strike framework can be used for other cross-platform system control. CrossC2Kit provides some inte…☆218Updated last year
- beta☆115Updated 7 months ago
- ☆314Updated 2 years ago