RunPE using Hell's Gate technique.
☆31Dec 4, 2020Updated 5 years ago
Alternatives and similar repositories for HellsRunPE
Users that are interested in HellsRunPE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆13May 20, 2023Updated 3 years ago
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆77Feb 27, 2020Updated 6 years ago
- Call 32bit NtDLL API directly from WoW64 Layer☆61Nov 18, 2020Updated 5 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Dec 31, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆108Jan 3, 2021Updated 5 years ago
- Disable PPL via custom driver and dump lsass☆15Mar 13, 2021Updated 5 years ago
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆30Feb 22, 2020Updated 6 years ago
- PoC for hiding PE exports☆67Dec 19, 2020Updated 5 years ago
- ☆32Jul 2, 2020Updated 6 years ago
- A tool that reads a PE file from a byte array buffer and injects it into memory.☆28Aug 5, 2019Updated 7 years ago
- HTTP/HTTPS/DNS inspector (windows driver)☆25Feb 20, 2019Updated 7 years ago
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- Windows Application Loader Running *.Exe files in Memory against Scrylla☆21Dec 20, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Self-Loading Registration Free COM Functions☆11Nov 12, 2019Updated 6 years ago
- Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique I…☆11Jul 18, 2025Updated last year
- Two C# RunPE's capable of x86 and x64 injections☆10Dec 2, 2018Updated 7 years ago
- ☆43Aug 10, 2019Updated 7 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆30Nov 9, 2021Updated 4 years ago
- ☆14Apr 7, 2018Updated 8 years ago
- .net based packer/obfuscator with apc based pe injection☆14Mar 23, 2016Updated 10 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- DLL Unhooking☆12Mar 26, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆15Dec 16, 2020Updated 5 years ago
- Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping☆69Oct 9, 2022Updated 4 years ago
- Software Protector☆19Aug 16, 2020Updated 6 years ago
- A fork of https://github.com/SafeBreach-Labs/pinjectra with a practical implementation of Stack Bombing☆14Jan 28, 2020Updated 6 years ago
- ☆73Oct 24, 2021Updated 5 years ago
- CVE-2019-1064 Local Privilege Escalation Vulnerability☆11Jun 12, 2019Updated 7 years ago
- Simple PE Packer Which Encrypts .text Section☆49May 28, 2017Updated 9 years ago
- Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间☆21Sep 28, 2022Updated 4 years ago
- ☆45Oct 16, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆121Oct 9, 2023Updated 3 years ago
- Win32 PE Anti-RE and Anti-debugging Framework☆13May 14, 2019Updated 7 years ago
- C++ Code Injector Class☆22Oct 2, 2020Updated 6 years ago
- A PoC designed to bypass all usermode hooks in a WoW64 environment.☆145Sep 16, 2020Updated 6 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆41Sep 23, 2021Updated 5 years ago
- Loads .NET Assembly Via CLR Loader☆17Mar 6, 2019Updated 7 years ago
- Reflectively load PE☆104Aug 4, 2020Updated 6 years ago