Tylous / MangleLinks
Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs
☆105Updated 3 years ago
Alternatives and similar repositories for Mangle
Users that are interested in Mangle are comparing it to the libraries listed below
Sorting:
- Shaco is a linux agent for havoc☆169Updated 2 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆129Updated 2 years ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆184Updated 10 months ago
- Havoc C2 profile generator☆101Updated 6 months ago
- A Mythic agent for Windows written in C☆153Updated this week
- ☆169Updated last year
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆207Updated 2 years ago
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆155Updated last year
- Lateral Movement Using DCOM and DLL Hijacking☆326Updated 2 years ago
- 「💀」Proof of concept on BYOVD attack☆165Updated last year
- Port of Cobalt Strike's Process Inject Kit☆190Updated last year
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆271Updated 2 years ago
- Adversary Emulation Framework☆129Updated 7 months ago
- Collection of BOFs created for red team/adversary engagements. Created to be small and interchangeable, for quick recon or eventing.☆230Updated last week
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆194Updated last year
- Patching AmsiOpenSession by forcing an error branching☆154Updated 2 years ago
- ☆186Updated 7 months ago
- Evasive Golang Loader☆137Updated last year
- C or BOF file to extract WebKit master key to decrypt user cookie☆207Updated last year
- ☆244Updated last year
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆213Updated last year
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆285Updated 2 years ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆199Updated 9 months ago
- AV bypass while you sip your Chai!☆226Updated last year
- Ghosting-AMSI☆220Updated 9 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆192Updated 3 months ago
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆153Updated 6 months ago
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆167Updated last year
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆155Updated 10 months ago
- Extracting NetNTLM without touching lsass.exe☆242Updated 2 years ago