C# Based Universal API Unhooker - Automatically Unhook API Hives (ntdll.dll,kernel32.dll,user32.dll,and kernelbase.dll)
☆24Mar 7, 2023Updated 3 years ago
Alternatives and similar repositories for SharpUnhooker
Users that are interested in SharpUnhooker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- AmsiScanBufferBypass using D/Invoke☆136Jun 17, 2021Updated 5 years ago
- RDPThief donut shellcode inject into mstsc☆88May 24, 2021Updated 5 years ago
- A little scanner to check the LDAP Signing state☆46Aug 2, 2021Updated 5 years ago
- ☆18Oct 30, 2022Updated 3 years ago
- Abusing Remote Windows SMB Shares for Fun and Pen Testing☆16May 23, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- ☆360Apr 24, 2021Updated 5 years ago
- AMSI detection PoC☆31Apr 14, 2020Updated 6 years ago
- A User Impersonation tool - via Token or Shellcode injection☆421May 21, 2022Updated 4 years ago
- ☆24Feb 1, 2025Updated last year
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- Windows C/C++ Socks5 Server☆89Jan 3, 2023Updated 3 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆36Nov 24, 2024Updated last year
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated 10 months ago
- Code for profiling sandboxes - Initially an idea to profile sandboxes, the code is written to take enviromental variables and send them b…☆31Jul 30, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- C# binary with embeded golang hack-browser-data☆100Dec 9, 2021Updated 4 years ago
- C# porting of SysWhispers2. It uses SharpASM to find the code caves for executing the system call stub.☆112Apr 14, 2023Updated 3 years ago
- LSASS enumeration like pypykatz written in C-Lang☆20Dec 1, 2021Updated 4 years ago
- NTAPI hook bypass with (semi) legit stack trace☆19May 9, 2023Updated 3 years ago
- ☆13Jul 30, 2021Updated 5 years ago
- all random stuff that dont warrant a seperate repo☆12Sep 2, 2022Updated 3 years ago
- Automatic DLL comment link generation and explaination of the DLL Proxying techniques☆10Aug 19, 2021Updated 4 years ago
- Experiments on the Windows Internals☆30Sep 22, 2019Updated 6 years ago
- This repository will contain source codes from the Tradecraft improvement blog series☆14Mar 27, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆537Nov 20, 2021Updated 4 years ago
- NimReflectiveLoader is a Nim-based tool for in-memory DLL execution using Reflective DLL Loading.☆31Jan 21, 2024Updated 2 years ago
- Things i do because i saw it on twitter on a weekend☆56Jul 20, 2025Updated last year
- Process injection via KernelCallbackTable☆13Jan 28, 2022Updated 4 years ago
- (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll☆45Mar 9, 2022Updated 4 years ago
- ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.☆13Aug 12, 2019Updated 6 years ago
- Resolve WinAPI func. Custom GetProcAddress and GetModuleHandle written in Nim☆33Jun 2, 2021Updated 5 years ago
- A PowerShell script anti-virus evasion tool☆18Jan 3, 2021Updated 5 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Determine if the WebClient Service (WebDAV) is running on a remote system☆28Sep 29, 2021Updated 4 years ago
- Bypassing amsi.dll via memory patch, simple code!☆16Oct 27, 2024Updated last year
- Project to use Golang inside C#☆80Jun 5, 2020Updated 6 years ago
- NTDLL unhooking via Parun's Fart technique to bypass EDR userland hooks☆75Feb 15, 2023Updated 3 years ago
- Secretsdump C# version only supporting local (live) operation☆56Apr 20, 2025Updated last year
- A service container for interacting with SRA's VECTR☆18Apr 9, 2025Updated last year
- Nice try reading NTDLL from disk, nerd.☆19Apr 18, 2022Updated 4 years ago