A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and remote processes.
☆32Aug 23, 2023Updated 3 years ago
Alternatives and similar repositories for DllNotificationInjection
Users that are interested in DllNotificationInjection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Research of modifying exported function names at runtime (C/C++, Windows)☆18May 28, 2024Updated 2 years ago
- Enable or Disable TokenPrivilege(s)☆16May 17, 2024Updated 2 years ago
- Cobalt Strike BOF to obtain location data☆30Jul 4, 2026Updated 3 months ago
- A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…☆469Aug 23, 2023Updated 3 years ago
- A lexer and parser for Sleep☆20Feb 20, 2026Updated 8 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven☆274Oct 16, 2024Updated 2 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Apr 5, 2022Updated 4 years ago
- A serie of exploits targeting eneio64.sys - Turning Physical Memory R/W into Virtual Memory R/W☆133Oct 19, 2025Updated last year
- Repository of different kernel drivers written while studying Windows NT Driver development☆12Apr 14, 2024Updated 2 years ago
- Threadless shellcode injection tool☆68Aug 5, 2024Updated 2 years ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by…☆18May 6, 2024Updated 2 years ago
- ☆88Jan 2, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Application for administer multidomain Active Directory-based networks☆30Jul 30, 2026Updated 3 months ago
- A simple tool to inject shellcode into the remote process with the ability to spoof parent process.☆16Mar 18, 2021Updated 5 years ago
- ☆10Jul 1, 2023Updated 3 years ago
- ☆60Dec 15, 2023Updated 2 years ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- ☆25Apr 28, 2024Updated 2 years ago
- BOF for C2 framework☆45Nov 9, 2024Updated last year
- A python polymorphic engine for C programs☆11Dec 8, 2023Updated 2 years ago
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆113Aug 29, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler☆149Jul 21, 2025Updated last year
- ☆138Dec 4, 2023Updated 2 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆24Sep 29, 2023Updated 3 years ago
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- AMSI Bypass for powershell☆31Apr 26, 2022Updated 4 years ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆102Mar 27, 2025Updated last year
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- use python on windows with full submodule support without installation☆30Jan 23, 2025Updated last year
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆70Feb 3, 2024Updated 2 years ago
- ☆19May 26, 2025Updated last year
- CVE-2025-7771: Arbitrary physical memory and I/O port read/write via ThrottleStop driver☆18Sep 5, 2025Updated last year
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆284Jun 8, 2023Updated 3 years ago
- Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…☆14Jan 18, 2026Updated 9 months ago