WKL-Sec / StackMask

Related projects: ⓘ

• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆34Updated 9 months ago
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆93Updated last year
• Meowmycks / etwunhook
  Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
  ☆41Updated 6 months ago
• NioZow / bof-collection
  ☆18Updated last month
• waawaa / breakcyserver
  ☆43Updated 2 years ago
• susMdT / effective-waffle
  yet another sleep encryption thing. also used the default github repo name for this one.
  ☆69Updated last year
• ProcessusT / UnhookingDLL
  This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…
  ☆67Updated 7 months ago
• lem0nSec / Dsebler
  Reimplementation of the KExecDD DSE bypass technique.
  ☆42Updated last week
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆33Updated last year
• JetP1ane / Artemis
  Artemis - C++ Hell's Gate Syscall Implementation
  ☆31Updated last year
• lap1nou / CLR_Heap_encryption
  ☆94Updated 11 months ago
• enkomio / s4killer
  ☆67Updated this week
• AzAgarampur / byeintegrity9-uac
  ☆35Updated last year
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆76Updated last year
• Uri3n / lurch
  Command and Control
  ☆23Updated last month
• GetRektBoy724 / SyscallShuffler
  Your NTDLL vaccine from modern direct syscall methods.
  ☆35Updated 2 years ago
• MrAle98 / BOF-RunPE
  ☆50Updated last year
• fern89 / C2
  A basic C2 framework written in C
  ☆53Updated 2 months ago
• Kr0ff / WinMalDev
  Various methods of executing shellcode
  ☆67Updated last year
• caueb / ThreadlessStompingKann
  Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
  ☆32Updated 8 months ago
• dosxuz / PerunsFart
  This is my own implementation of the Perun's Fart technique by Sektor7
  ☆64Updated 2 years ago
• Cracked5pider / kaine-assembly
  a demo module for the kaine agent to execute and inject assembly modules
  ☆33Updated 3 weeks ago
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆41Updated 2 years ago
• D1rkMtr / AmsiScanBuffer
  ☆38Updated this week
• eladshamir / SharpElevator
  SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and publishe…
  ☆47Updated 2 years ago
• Orange-Cyberdefense / EDRSnowblast
  This project is an EDRSandblast fork, adding some features and custom pieces of code.
  ☆18Updated 11 months ago
• ShorSec / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆18Updated last year
• Uri3n / Advanced-TLS-Injection
  A direct improvement to remote TLS Injection.
  ☆15Updated 3 months ago
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆28Updated last year
• D1rkMtr / EtwPatching
  ☆73Updated this week