TunnelGRE / ProcessInjection-GO
Shellcode encryption in RC4 and process injection into explorer.exe.
☆35Updated last year
Related projects ⓘ
Alternatives and complementary repositories for ProcessInjection-GO
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆94Updated last year
- ☆73Updated last year
- This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…☆67Updated 9 months ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆78Updated last year
- Sleep Obfuscation☆41Updated 2 years ago
- abusing Process Hacker driver to terminate other processes (BYOVD)☆79Updated last year
- Titan: A generic user defined reflective DLL for Cobalt Strike☆70Updated last year
- DLL Exports Extraction BOF with optional NTFS transactions.☆78Updated 3 years ago
- ☆61Updated 9 months ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated last year
- Red Team Operation's Defense Evasion Technique.☆51Updated 5 months ago
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆55Updated last year
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆21Updated last year
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆72Updated last year
- Flexible C# shellcode runner☆37Updated 2 years ago
- Beacon Object Files (BOF) for Cobalt Strike.☆28Updated 2 months ago
- This is my own implementation of the Perun's Fart technique by Sektor7☆66Updated 2 years ago
- A work in progress BOF/COFF loader in Rust☆45Updated last year
- Beacon Object File allowing creation of Beacons in different sessions.☆76Updated 2 years ago
- ☆35Updated last year
- Winsocket for Cobalt Strike.☆98Updated last year
- ☆51Updated last year
- In-memory token vault BOF for Cobalt Strike☆136Updated 2 years ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated 9 months ago
- old postex for grabbing a krbtgs for my current user☆28Updated last year
- a library that automates some clean syscalls to make it easier to implement☆82Updated 2 years ago