Teach2Breach / phantom_persist_rsLinks
Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence
☆44Updated this week
Alternatives and similar repositories for phantom_persist_rs
Users that are interested in phantom_persist_rs are comparing it to the libraries listed below
Sorting:
- Using LNK files and user input simulation to start processes under explorer.exe☆25Updated 9 months ago
- A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆35Updated 3 months ago
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆49Updated 5 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆51Updated last year
- EmbedExeLnk by x86matthew modified by d4rkiZ☆42Updated 2 years ago
- Rust template/library for implementing your own COFF loader☆50Updated 4 months ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated last year
- Linker for Beacon Object Files☆116Updated this week
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆47Updated last month
- ☆44Updated last month
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆30Updated 4 months ago
- converts sRDI compatible dlls to shellcode☆29Updated 5 months ago
- Threadless shellcode injection tool☆65Updated 10 months ago
- BypassCredGuard CS BOF☆42Updated 5 months ago
- remote process injections using pool party techniques☆62Updated 4 months ago
- Section-based payload obfuscation technique for x64☆61Updated 10 months ago
- A process injection technique using only thread context manipulation☆38Updated last year
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆60Updated last year
- Bypassing Amsi using LdrLoadDll☆44Updated 5 months ago
- ☆99Updated last year
- ☆71Updated last year
- ☆97Updated 9 months ago
- ☆27Updated 5 months ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆52Updated 2 months ago
- ☆50Updated 3 weeks ago
- early cascade injection PoC based on Outflanks blog post, in rust☆59Updated 7 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆40Updated 9 months ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year
- ☆38Updated 2 weeks ago
- A work in progress BOF/COFF loader in Rust☆50Updated 2 years ago