SecuProject / DLLHijackingScanner

Related projects ⓘ

Alternatives and complementary repositories for DLLHijackingScanner

• m3rcer / Chisel-Strike
  A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities.
  ☆441Updated 7 months ago
• boku7 / injectAmsiBypass
  Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.
  ☆377Updated last year
• Bl4ckM1rror / FUD-UUID-Shellcode
  ☆322Updated last year
• codewhitesec / HandleKatz
  PIC lsass dumper using cloned handles
  ☆573Updated 2 years ago
• pwn1sher / WMEye
  WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement
  ☆361Updated 2 years ago
• capt-meelo / laZzzy
  laZzzy is a shellcode loader, developed using different open-source libraries, that demonstrates different execution techniques.
  ☆460Updated last year
• aaaddress1 / Skrull
  Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers t…
  ☆448Updated 3 years ago
• Cracked5pider / KaynStrike
  UDRL for CS
  ☆416Updated 11 months ago
• GeorgePatsias / ScareCrow-CobaltStrike
  Cobalt Strike script for ScareCrow payloads intergration (EDR/AV evasion)
  ☆457Updated 2 years ago
• sailay1996 / CdpSvcLPE
  Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)
  ☆250Updated 2 years ago
• VirtualAlllocEx / Create-Thread-Shellcode-Fetcher
  This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and down…
  ☆245Updated last year
• ly4k / CallbackHell
  Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)
  ☆462Updated 3 years ago
• rvrsh3ll / BOF_Collection
  Various Cobalt Strike BOFs
  ☆581Updated 2 years ago
• pwn1sher / KillDefender
  A small POC to make defender useless by removing its token privileges and lowering the token integrity
  ☆666Updated 2 years ago
• knight0x07 / ImpulsiveDLLHijack
  C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can…
  ☆496Updated 3 years ago
• S3cur3Th1sSh1t / MultiPotato
  ☆499Updated 3 years ago
• boku7 / spawn
  Cobalt Strike BOF that spawns a sacrificial process, injects it with shellcode, and executes payload. Built to evade EDR/UserLand hooks b…
  ☆429Updated last year
• anthemtotheego / InlineExecute-Assembly
  InlineExecute-Assembly is a proof of concept Beacon Object File (BOF) that allows security professionals to perform in process .NET assem…
  ☆609Updated last year
• mgeeky / ElusiveMice
  Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind
  ☆421Updated last year
• 0vercl0k / CVE-2022-21971
  PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"
  ☆307Updated 2 years ago
• boku7 / Ninja_UUID_Runner
  Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!
  ☆433Updated last year
• NUL0x4C / TerraLdr
  A Payload Loader Designed With Advanced Evasion Features
  ☆499Updated 2 years ago
• Sh0ckFR / Lockbit3.0-MpClient-Defender-PoC
  Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC
  ☆171Updated 2 years ago
• oXis / GPUSleep
  Move CS beacon to GPU memory when sleeping
  ☆236Updated 3 years ago
• CCob / BOF.NET
  A .NET Runtime for Cobalt Strike's Beacon Object Files
  ☆679Updated 2 months ago
• Octoberfest7 / MemFiles
  A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk
  ☆428Updated 4 months ago
• IkerSaint / KingHamlet
  Process Ghosting Tool
  ☆166Updated 3 years ago
• NUL0x4C / AtomPePacker
  A Highly capable Pe Packer
  ☆684Updated 2 years ago