Hypervisor isolated shellcode execution environment. Maps host process memory into a guest vCPU, intercepts DLL execute faults, and proxies API calls to the host, Stardust PIC shellcode compatible
☆58Nov 4, 2026Updated this week
Alternatives and similar repositories for HyperLoader
Users that are interested in HyperLoader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Intercepting cpuid without a hypervisor☆21Oct 29, 2026Updated last week
- ☆69Oct 27, 2026Updated last week
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆58Updated this week
- Demonstration of the DLL party process injection technique☆99Oct 1, 2026Updated last month
- AMD-V nested hypervisor research driver for Windows: NPT virtualization, NPT hooks, CR3 protection suite, X-deny syscall sensing + behavi…☆18Oct 29, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆40Oct 14, 2026Updated 3 weeks ago
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- Generate proxy DLLs for sideloading and hijacking research. Mirrors exports, embeds originals, runs payloads.☆17Jun 16, 2026Updated 4 months ago
- ☆28Jun 4, 2026Updated 5 months ago
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆25Jul 31, 2026Updated 3 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆77Oct 18, 2026Updated 2 weeks ago
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆83Sep 18, 2026Updated last month
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆108Oct 27, 2026Updated last week
- Terminate Processes from a Kernel Driver receiving the process to kill via simple userland application☆13Oct 10, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C++ Implementation to Hide File in ADS with the option of Encrpytion + Fragmentation☆13Dec 18, 2024Updated last year
- Monitoring Process Creation/Termination, Thread Creation/Termination and Image Load Notifications from a Kernel Driver☆12Oct 22, 2024Updated 2 years ago
- Beacon Object File (BOF) to coerce machine account auth via IPP.☆94Updated this week
- Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/☆52Jul 22, 2021Updated 5 years ago
- Advanced in-memory process injection using transient SEC_IMAGE sections, custom crypter, and ADS payload delivery no disk traces, maximum…☆23Jun 12, 2025Updated last year
- ☆25Oct 27, 2026Updated last week
- Surgical x64 VEH/VCH dumper. Walks the vectored exception handler list, extracts each handler as a standalone PE64 that IDA opens directl…☆21Jul 17, 2026Updated 3 months ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆36Oct 28, 2026Updated last week
- A stealthy process injection PoC combining Thread Name-Calling for payload delivery with Waiting Thread Hijacking for execution, with zer…☆139Oct 30, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Detecting window hijacking via ETW and GDI table scanning☆33Apr 11, 2026Updated 6 months ago
- Searchable archive of Windows kernel symbols, struct layouts, function RVAs and byte patterns extracted from Microsoft PDBs and pinned to…☆15Oct 11, 2026Updated 3 weeks ago
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆50Oct 27, 2026Updated last week
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- modern C++ gui & rendering framework with abstracted STL & CRT☆24Jun 19, 2026Updated 4 months ago
- Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)☆155Aug 18, 2026Updated 2 months ago
- This is a project aimed to make every other Saas product a C2, confluence is just the beginning.☆23Oct 21, 2026Updated 2 weeks ago
- Handle Redirect via BYOVD Kernel Read/Write☆22Sep 13, 2026Updated last month
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Finding SSDT address on windows 10 64bit☆14Sep 10, 2022Updated 4 years ago
- Process ID Mutator via BYOVD Kernel R/W☆22Sep 6, 2026Updated 2 months ago
- Manual Map Your Files, Bypass 100% Runtime.☆11Aug 31, 2022Updated 4 years ago
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆16Aug 26, 2026Updated 2 months ago
- ☆56Sep 18, 2026Updated last month
- WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.☆112Jun 22, 2026Updated 4 months ago
- Undetected Easy (UDE) is a detection scanner for finding detections before they catch you, using reversed routines from EasyAntiCheat, Ba…☆52Jun 26, 2026Updated 4 months ago