VirtualAlllocEx / Shell-we-AssemblyLinks
Shellcode execution via x86 inline assembly based on MSVC syntax
☆14Updated 2 years ago
Alternatives and similar repositories for Shell-we-Assembly
Users that are interested in Shell-we-Assembly are comparing it to the libraries listed below
Sorting:
- ☆15Updated 3 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆23Updated 5 years ago
- ☆13Updated 2 years ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆12Updated 8 months ago
- doesnt work and wont work on it anymore☆9Updated last year
- ☆26Updated 3 years ago
- Simple .NET profiler shellcode loader☆10Updated 3 years ago
- ☆54Updated 2 years ago
- A (quite) simple steganography algorithm to hide shellcodes within bitmap image.☆21Updated last year
- Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"☆28Updated 2 years ago
- ☆12Updated 2 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆56Updated 2 years ago
- Beacon Debugger☆40Updated 8 months ago
- Persistence via Shell Extensions☆62Updated last year
- Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD☆26Updated last year
- Giga-byte Control Center (GCC) is a software package designed for improved user experience of Gigabyte hardware, often found in gaming an…☆31Updated 2 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Updated 2 years ago
- ☆22Updated last year
- Released presentations of my talks + code that used during these talks☆14Updated 10 months ago
- A PoC tool for exploiting leaked process and thread handles☆32Updated last year
- A method to execute shellcode using RegisterWaitForInputIdle API.☆54Updated 2 years ago
- ☆36Updated 2 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆19Updated 2 years ago
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆22Updated 2 years ago
- Implementation of ITaskHandler in C++☆13Updated 2 years ago
- ☆62Updated 3 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 3 years ago
- BYOVD collection☆23Updated last year
- Exploit for Arbitrary File Move vulnerability in ZoneAlarm AV☆26Updated 2 years ago
- Exploit for LPE in ZoneAlarm Antivirus/Firewall☆32Updated 3 years ago