Unprotect-Project / FuncInEvasionTechniqueDemoLinks
☆34Updated last year
Alternatives and similar repositories for FuncInEvasionTechniqueDemo
Users that are interested in FuncInEvasionTechniqueDemo are comparing it to the libraries listed below
Sorting:
- Persistence via Shell Extensions☆61Updated last year
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 3 years ago
- API Hammering with C++20☆46Updated 2 years ago
- Self delete DLL (2)☆14Updated last year
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆32Updated last year
- Hooked create process injection for meterpreter☆23Updated 4 years ago
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆31Updated 2 years ago
- A simple PE loader.☆26Updated 2 years ago
- ☆31Updated last year
- A class to emulate the behavior of NtQuerySystemInformation when passed the SystemHypervisorDetailInformation information class☆26Updated last year
- ☆34Updated 3 months ago
- Process Ghosting is a technique in which a process is created from a delete pending file. This means the created process is not backed by…☆14Updated last year
- Extension functionality for the NightHawk operator client☆27Updated last year
- ☆31Updated 2 months ago
- Windows AppLocker Driver (appid.sys) LPE☆62Updated 10 months ago
- ☆26Updated 4 months ago
- the Open Source and Pure C++ Packer for eXecutables☆21Updated 2 years ago
- Offensive Assembly code snippets.☆12Updated last year
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year
- miscellaneous codes☆36Updated last year
- A method to execute shellcode using RegisterWaitForInputIdle API.☆54Updated 2 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆50Updated last year
- BOF for C2 framework☆41Updated 7 months ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆24Updated 9 months ago
- Small tool to play with IOCs caused by Imageload events☆42Updated 2 years ago
- ☆12Updated last year
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Updated 2 years ago
- Just another Process Injection using Process Hollowing technique.☆17Updated last year
- Small POC for process ghosting☆39Updated 3 years ago
- ☆21Updated last year