S3cur3Th1sSh1t / NimShellcodeFluctuation
ShellcodeFluctuation PoC ported to Nim
☆75Updated 2 years ago
Alternatives and similar repositories for NimShellcodeFluctuation:
Users that are interested in NimShellcodeFluctuation are comparing it to the libraries listed below
- ☆47Updated last year
- A quick example of the Hells Gate technique in Nim☆93Updated 3 years ago
- My implementation of Halo's Gate technique in C#☆53Updated 2 years ago
- D/Invoke implementation in Nim☆100Updated 2 years ago
- A care package of useful bofs for red team engagments☆54Updated 2 months ago
- Shellcode Injector that obtains system call opcodes using the Halo's Gate method to evade EDR Hooks.☆19Updated 3 years ago
- Beacon Object File allowing creation of Beacons in different sessions.☆78Updated 2 years ago
- this repo is to cover the other undocumented or published / in different langaue to achieve shellcode injection via windows callback func…☆85Updated 2 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆61Updated last month
- ☆35Updated last year
- Beacon Object Files (not Buffer Overflows)☆53Updated last year
- Proof of concept Beacon Object File (BOF) that attempts to detect userland hooks in place by AV/EDR☆98Updated 3 years ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆74Updated last month
- Unchain AMSI by patching the provider’s unmonitored memory space☆88Updated 2 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆86Updated 2 years ago
- PoC XLL builder in Python/Nim☆44Updated 2 years ago
- NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs☆92Updated 2 years ago
- A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …☆83Updated 2 years ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆90Updated 2 years ago
- Sleep Obfuscation☆43Updated 2 years ago
- Cobalt Strike BOF for quser.exe implementation using Windows API☆83Updated last year
- RDLL for Cobalt Strike beacon to silence sysmon process☆87Updated 2 years ago
- C# Port of LdapRelayScan☆79Updated 2 years ago
- Grab unsaved Notepad contents with a Beacon Object File☆49Updated 2 years ago
- I have documented all of the AMSI patches that I learned till now☆74Updated last year
- An insecurely implemented and installed Windows service for emulating elevation of privileges vulnerabilities☆56Updated 2 years ago
- A simple BOF that frees UDRLs☆115Updated 2 years ago
- DLL Exports Extraction BOF with optional NTFS transactions.☆81Updated 3 years ago
- COFF and BOF Loader written in Nim☆168Updated 2 years ago
- ☆88Updated 2 years ago