COM-based folder creation via Shell Window process POC reverse-engineered from Turla’s Kazuar v3 loader.
☆12Jan 14, 2026Updated 9 months ago
Alternatives and similar repositories for ShellWindowComFolderCreate
Users that are interested in ShellWindowComFolderCreate are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Patchless ETW & AMSI bypass POC reverse-engineered from Turla’s Kazuar v3 loader.☆24Jan 14, 2026Updated 9 months ago
- R3D SSH Hunter: The Ultimate SSH Key and Bad Guy Tracker☆12Nov 5, 2024Updated 2 years ago
- Patch (block) whatever function you want in a remote process. Adding a ret instruction at the first memory address of this function, the …☆13Jul 11, 2024Updated 2 years ago
- General malware analysis stuff☆37Aug 26, 2024Updated 2 years ago
- ☆15Mar 27, 2026Updated 7 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Okta Data Collector for BloodHound Community☆18Sep 23, 2026Updated last month
- ☆15Feb 12, 2023Updated 3 years ago
- Cobaltstrike UDRL with memory evasion☆15May 16, 2024Updated 2 years ago
- A (not so) shitty bruteforcer framework written in Python☆17Nov 14, 2024Updated last year
- A new way for you to structure your threat content.☆11Oct 24, 2024Updated 2 years ago
- Use fingerprinting to actively hunt for Command and Control servers on Shodan. Process threat feeds from Abuse.ch services to create a …☆11May 12, 2023Updated 3 years ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 4 months ago
- Implementing Ghostly-Hollowing using tampered syscalls for remote PE injection☆77Dec 26, 2025Updated 10 months ago
- Public Data Set of AI Favicon WorkFlow Output☆16Jul 1, 2026Updated 4 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Unique technique for bypassing AMSI☆18Dec 26, 2025Updated 10 months ago
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆68Sep 17, 2026Updated last month
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Nov 17, 2019Updated 6 years ago
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 11 months ago
- python-javaobj is a python library that provides functions for reading of Java objects serialized ObjectOutputStream.☆15Mar 21, 2015Updated 11 years ago
- my MSTICpy practice and custom tools repository☆11Apr 23, 2025Updated last year
- ☆26May 8, 2026Updated 5 months ago
- A portable C# utility for enumerating local and remote windows sessions☆56Jan 1, 2026Updated 10 months ago
- Static Encrypt is an crate that encrypts string literals at compile time and only decrypted at runtime when needed.☆61Jan 17, 2026Updated 9 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆19Jan 8, 2026Updated 9 months ago
- Golang C2 Client + PHP API Handler☆15Aug 1, 2023Updated 3 years ago
- System Call Integrity Layer - experimental security research☆29Apr 14, 2026Updated 6 months ago
- A Public Package Scanner for The Community☆13Jan 14, 2026Updated 9 months ago
- An Ansible collection that installs a SCOM deployment with optional configurations.☆24Dec 9, 2025Updated 10 months ago
- POC for CVE-2023-29360☆11Aug 31, 2024Updated 2 years ago
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- Ludus roles to deploy ASR rules and MDI auditing settings☆25Aug 5, 2025Updated last year
- An introduction to detection engineering☆14Jan 3, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Command Augmentation support for BOFs and .NET assemblies across agents☆53Jul 30, 2026Updated 3 months ago
- Rust-based Windows kernel driver research project with a companion user-mode client for IOCTL-based experiments with process, token, PPL,…☆20Apr 30, 2026Updated 6 months ago
- Assess, convert and deploy Microsoft Sentinel analytics rules as Defender XDR custom detections☆16Sep 29, 2026Updated last month
- Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).☆11Sep 30, 2018Updated 8 years ago
- Janus analyzes C2 telemetry to surface failure patterns, operator friction, and automation opportunities across engagements.☆58Oct 22, 2026Updated 2 weeks ago
- Automating Cyber Threat Intelligence Reporting with Natural Language Generation☆14Jan 24, 2024Updated 2 years ago
- ☆61Dec 10, 2025Updated 10 months ago