Unprotect-Project / FuncInEvasionTechniqueDemo
☆34Updated last year
Alternatives and similar repositories for FuncInEvasionTechniqueDemo
Users that are interested in FuncInEvasionTechniqueDemo are comparing it to the libraries listed below
Sorting:
- Persistence via Shell Extensions☆61Updated last year
- Extension functionality for the NightHawk operator client☆27Updated last year
- Small tool to play with IOCs caused by Imageload events☆42Updated 2 years ago
- Small POC for process ghosting☆39Updated 3 years ago
- a short C code POC to gain persistence and evade sysmon event code registry (creation, update and deletion) REG_NOTIFY_CLASS Registry Cal…☆51Updated last year
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆24Updated 7 months ago
- Self Delete DLL☆23Updated last year
- ☆34Updated last month
- Self delete DLL (2)☆14Updated last year
- API Hammering with C++20☆47Updated 2 years ago
- ☆24Updated 3 months ago
- ☆48Updated last year
- ☆12Updated 2 years ago
- the Open Source and Pure C++ Packer for eXecutables☆20Updated 2 years ago
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- Remap ntdll.dll using only NTAPI functions with a suspended process☆21Updated last month
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆41Updated 9 months ago
- Sleep Obfuscation☆45Updated 2 years ago
- A method to execute shellcode using RegisterWaitForInputIdle API.☆52Updated 2 years ago
- A simple rpc2socks alternative in pure Go.☆28Updated 10 months ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆32Updated last year
- A tool for interacting with the Anti-Malware Scan Interface API for pen testing purposes.☆62Updated last year
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆31Updated 2 years ago
- in-process powershell runner for BRC4☆45Updated last year
- ☆36Updated 2 years ago
- Hooked create process injection for meterpreter☆23Updated 3 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆50Updated last year
- A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously☆31Updated 2 years ago
- Titan: A crappy Reflective Loader written in C and assembly for Cobalt Strike. Redirects DNS Beacon over DoH☆48Updated 3 years ago
- ☆59Updated last year