Proof of concept - Covert Channel using Windows Filtering Platform (C#)
☆21Aug 29, 2021Updated 5 years ago
Alternatives and similar repositories for wfp-reader
Users that are interested in wfp-reader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆106Mar 8, 2023Updated 3 years ago
- ☆16Jul 3, 2020Updated 6 years ago
- ☆19Aug 19, 2021Updated 5 years ago
- A fork of https://github.com/SafeBreach-Labs/pinjectra with a practical implementation of Stack Bombing☆14Jan 28, 2020Updated 6 years ago
- D/Invoke port of UrbanBishop☆30Dec 13, 2020Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used☆90Aug 26, 2021Updated 5 years ago
- ☆24Sep 26, 2021Updated 5 years ago
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 5 years ago
- C# alternative to the linux "cat" command... Prints file contents to console. For use with Cobalt Strike's Execute-Assembly☆15Jul 15, 2021Updated 5 years ago
- DLL Exports Extraction BOF with optional NTFS transactions.☆93Nov 5, 2021Updated 4 years ago
- ☆13Jul 30, 2021Updated 5 years ago
- MiniDumpWriteDump behavior modification hook☆50Feb 15, 2021Updated 5 years ago
- Syscall BOF to arbitrarily add/detract process token privilege rights.☆68Jul 10, 2024Updated 2 years ago
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯☆37Dec 13, 2020Updated 5 years ago
- A BOF to parse the imports of a provided PE-file, optionally extracting symbols on a per-dll basis.☆86Oct 28, 2021Updated 5 years ago
- Obtain and parse SSL certificates☆87Nov 19, 2021Updated 4 years ago
- Userland API Unhooker Project☆111Apr 4, 2026Updated 6 months ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆35Sep 15, 2022Updated 4 years ago
- ☆35Dec 27, 2021Updated 4 years ago
- Petaq - Purple Team Command & Control Server☆103Dec 8, 2022Updated 3 years ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago
- Nim version of MDSec's Parallel Syscall PoC☆124Apr 4, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- .Net Assembly to block ETW telemetry in current process☆78May 14, 2020Updated 6 years ago
- Koppeling x Metatwin x LazySign☆216Aug 26, 2021Updated 5 years ago
- PoC code from blog☆19Mar 10, 2020Updated 6 years ago
- Test if an antivirus is installed via the resolution of the service virtual SID☆55Jan 24, 2020Updated 6 years ago
- Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.☆78Apr 6, 2021Updated 5 years ago
- A compilation of Aggressor/Sleep scripts for operational purposes that I've made.☆11Sep 17, 2021Updated 5 years ago
- Finding SSL Blindspots for Red Teams☆33Jul 28, 2020Updated 6 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆27Sep 8, 2021Updated 5 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆125May 22, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Example code for using named pipe output with beacon ReflectiveDLLs☆118Jun 24, 2020Updated 6 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- ☆100Aug 23, 2021Updated 5 years ago
- Just a PoC to turn xlsx (regular Excel files) into xlsm (Excel file with macro) and slipping inside a macro (vbaProject.bin)☆143Sep 4, 2021Updated 5 years ago
- DLL Hijack Search Order Enumeration BOF☆146Nov 3, 2021Updated 4 years ago
- ☆36Apr 30, 2020Updated 6 years ago
- Load .net assemblies from memory while having them appear to be loaded from an on-disk location.☆172May 5, 2021Updated 5 years ago