TunnelGRE / Percino
Evasive Golang Loader
☆130Updated 3 months ago
Related projects ⓘ
Alternatives and complementary repositories for Percino
- Shaco is a linux agent for havoc☆144Updated last year
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆163Updated last month
- Execute shellcode files with rundll32☆184Updated 9 months ago
- Extracting NetNTLM without touching lsass.exe☆224Updated 11 months ago
- Attempt at Obfuscated version of SharpCollection☆189Updated last week
- Execute shellcode from a remote-hosted bin file using Winhttp.☆225Updated last year
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆269Updated 3 months ago
- PoC for using MS Windows printers for persistence / command and control via Internet Printing☆143Updated 6 months ago
- .NET assembly loader with patchless AMSI and ETW bypass☆278Updated last year
- 「💀」Proof of concept on BYOVD attack☆148Updated 8 months ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆155Updated last year
- ☆142Updated last week
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆147Updated 6 months ago
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆171Updated last year
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆148Updated 10 months ago
- Weaponized HellsGate/SigFlip☆194Updated last year
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆171Updated 10 months ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆190Updated 5 months ago
- C2 infrastructure that allows Red Teamers to execute system commands on compromised hosts through Microsoft Teams.☆156Updated last week
- Patching AmsiOpenSession by forcing an error branching☆144Updated last year
- Github as C2 Demonstration , free API = free C2 Infrastructure☆130Updated last year
- Kill AV/EDR leveraging BYOVD attack☆309Updated last year
- ☆126Updated 3 months ago
- ☆156Updated last year
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆97Updated last year
- AV bypass while you sip your Chai!☆208Updated 6 months ago
- PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.☆365Updated 5 months ago
- ☆175Updated 11 months ago