ThanniKudam / Malware-DevelopmentLinks
Just another repository for malware development
☆13Updated last year
Alternatives and similar repositories for Malware-Development
Users that are interested in Malware-Development are comparing it to the libraries listed below
Sorting:
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Updated last year
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆101Updated last year
- Classic Process Injection with Memory Evasion Techniques implemantation☆72Updated 2 years ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆51Updated last year
- Windows Thread Pool Injection Havoc Implementation☆32Updated last year
- Bypasses AMSI protection through remote memory patching and parsing technique.☆54Updated 8 months ago
- Proxy function calls through the thread pool with ease☆31Updated 11 months ago
- Repository to gather the .NET malware I will be developing☆18Updated 10 months ago
- Shellcode loader☆100Updated last year
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆119Updated last month
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆88Updated last month
- API Hammering with C++20☆50Updated 3 years ago
- Cortex EDR Ransomware protection Bypass☆25Updated last year
- Impersonate Tokens using only NTAPI functions☆83Updated 10 months ago
- A pure C version of SymProcAddress☆30Updated last year
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆101Updated 3 weeks ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆63Updated 10 months ago
- Just another ntdll unhooking using Parun's Fart technique☆76Updated 2 years ago
- Splitting and executing shellcode across multiple pages☆103Updated 2 years ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61Updated 8 months ago
- Self-cleaning in-memory PICO loader for Crystal Palace. Automatically erases traces and operates entirely in memory for stealthy payload …☆48Updated 3 months ago
- Shellcode Loader Utilizing ETW Events☆67Updated 11 months ago
- Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already s…☆66Updated 2 years ago
- Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…☆73Updated 3 months ago
- Evade behavioral analysis by executing malicious code within trusted Microsoft call stacks, patchless hooking library IAT/EAT.☆129Updated 2 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆79Updated 2 years ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆123Updated 2 months ago
- Rewrite to fit my needs☆32Updated last year
- A python script that automates a C2 Profile build☆48Updated last month
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆90Updated 5 months ago