Unprotect-Project / FuncInEvasionTechniqueDemoLinks
☆34Updated last year
Alternatives and similar repositories for FuncInEvasionTechniqueDemo
Users that are interested in FuncInEvasionTechniqueDemo are comparing it to the libraries listed below
Sorting:
- Persistence via Shell Extensions☆62Updated 2 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆50Updated last year
- DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable☆57Updated last year
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆31Updated 2 years ago
- API Hammering with C++20☆50Updated 3 years ago
- ☆32Updated last year
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆38Updated 2 years ago
- https://github.com/janoglezcampos/c_syscalls with the ASM rewritten by myself for Visual Studio's Compiler.☆31Updated last year
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆33Updated last year
- EvtPsst☆55Updated last year
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆78Updated last year
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- Self delete DLL (2)☆14Updated last year
- ☆59Updated last year
- Process Injection: APC Injection☆33Updated 4 years ago
- Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE☆65Updated 2 years ago
- ☆37Updated 2 years ago
- Standalone Metasploit-like XOR encoder for shellcode☆47Updated last year
- Parent Process ID Spoofing, coded in CGo.☆23Updated 3 months ago
- Small tool to play with IOCs caused by Imageload events☆42Updated 2 years ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆43Updated last year
- Linux Sleep Obfuscation☆105Updated last year
- Unpacker for donut shellcode☆17Updated 5 years ago
- Splitting and executing shellcode across multiple pages☆102Updated 2 years ago
- A more reliable way of resolving syscall numbers in Windows☆53Updated last year
- Windows AppLocker Driver (appid.sys) LPE☆62Updated last year
- A bunch of shenanigans using functions, VEH and more☆30Updated 2 months ago
- Just another ntdll unhooking using Parun's Fart technique☆75Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year