Xre0uS / KiD

Related projects: ⓘ

• EvilBytecode / PPID-Spoofing
  Parent Process ID Spoofing, coded in CGo.
  ☆21Updated 2 months ago
• EvilBytecode / Ntdll-Unhook
  Unhook Ntdll.dll, Go & C++.
  ☆11Updated 2 months ago
• NUL0x4C / RecycleBinPersistence
  using the Recycle Bin to insure persistence
  ☆11Updated 2 years ago
• TraiLeR2 / CVE-2023-36168
  An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component
  ☆11Updated last year
• shlyuz / teamserver
  ☆12Updated 2 years ago
• plackyhacker / AMSI-Bypass
  Another AMSI bypass - but in C++.
  ☆25Updated last year
• G0ldenGunSec / DayBird
  Extension functionality for the NightHawk operator client
  ☆26Updated 10 months ago
• TimMisiak / RunWithDll
  A utility that can be used to launch an executable with a DLL injected
  ☆19Updated 10 months ago
• MaorSabag / HollowMask
  Just another Process Injection using Process Hollowing technique.
  ☆16Updated last year
• NUL0x4C / GP
  using the gpu to hide your payload
  ☆47Updated 2 years ago
• cbrnrd / maliketh
  🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
  ☆36Updated 6 months ago
• EvilBytecode / Nyx-Full-Dll-Unhook
  (EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.
  ☆15Updated last month
• rad9800 / BloatedHammer
  API Hammering with C++20
  ☆34Updated 2 years ago
• zimnyaa / fiber-stager
  A simple Nim stager (w/ fiber execution)
  ☆14Updated 2 years ago
• p4p1 / havoc-store
  A simple website to act as a store for havoc modules and extensions
  ☆21Updated 4 months ago
• 0xv1n / proc-suspend
  powershell script i wrote that can suspend an arbitrary process (with limits)
  ☆19Updated last year
• PL-V / Firefox-WebInject
  Firefox webInjector capable of injecting codes into webpages using a mitmproxy.
  ☆39Updated last year
• splexas / TrampHooker
  A mechanism that trampoline hooks functions in x86/x64 systems.
  ☆19Updated 10 months ago
• rbmm / Services
  ☆17Updated last year
• rbmm / DirectSysCall
  ☆11Updated last year
• iamagarre / BadExclusions
  BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR
  ☆17Updated 7 months ago
• LethalSnake1337 / PE-Loader-exercise
  A simple PE loader.
  ☆25Updated last year
• bluefrostsecurity / Windows-Drive-Remapping-EoP
  ☆23Updated 10 months ago
• realoriginal / krbdump
  A way to extract tickets in case I need to purge and restore tickets on the fly.
  ☆15Updated 4 months ago
• VirtualAlllocEx / C2-Traffic-Redirection
  ☆13Updated this week
• rbmm / ARL
  ☆22Updated 3 months ago
• oldboy21 / CGPL
  Yet, Another Packer/Loader
  ☆25Updated last year
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆31Updated last year
• rbmm / Hollowed-Process
  ☆24Updated 5 months ago
• xforcered / DayBird
  Extension functionality for the NightHawk operator client
  ☆26Updated 10 months ago