ZeroMemoryEx / SleepKillerLinks
Bypass Malware Time Delays
☆100Updated 2 years ago
Alternatives and similar repositories for SleepKiller
Users that are interested in SleepKiller are comparing it to the libraries listed below
Sorting:
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated last year
- ☆136Updated last year
- Small PoC of using a Microsoft signed executable as a lolbin.☆137Updated 2 years ago
- abusing Process Hacker driver to terminate other processes (BYOVD)☆82Updated 2 years ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆123Updated 2 years ago
- Deleting Shadow Copies In Pure C++☆114Updated 2 years ago
- A Poc on blocking Procmon from monitoring network events☆103Updated 2 years ago
- RDLL for Cobalt Strike beacon to silence sysmon process☆88Updated 2 years ago
- Find DLLs with RWX section☆81Updated last year
- A bunch of scripts and code i wrote.☆141Updated 6 months ago
- POC for frustrating/defeating Malware Analysts☆154Updated 2 years ago
- Do some DLL SideLoading magic☆83Updated last year
- Experiment on reproducing Obfuscate & Sleep☆145Updated 4 years ago
- Kernel Mode Driver for Elevating Process Privileges☆133Updated 2 years ago
- Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html☆124Updated 3 years ago
- Splitting and executing shellcode across multiple pages☆103Updated last year
- A more reliable way of resolving syscall numbers in Windows☆49Updated last year
- It's pointy and it hurts!☆126Updated 2 years ago
- I have documented all of the AMSI patches that I learned till now☆72Updated 2 months ago
- Malware?☆70Updated 7 months ago
- Red Team Operation's Defense Evasion Technique.☆52Updated last year
- Grab Firefox post requests by hooking PR_Write function from nss3.dll module using trampoline hook to get passwords and emails of users☆42Updated 2 years ago
- A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.☆70Updated 2 years ago
- ☆85Updated last year
- ☆115Updated 2 years ago
- Detect strange memory regions and DLLs☆183Updated 3 years ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆89Updated 11 months ago
- Simple BOF to read the protection level of a process☆114Updated 2 years ago
- Patch AMSI and ETW in remote process via direct syscall☆81Updated 3 years ago
- kernel-mode DLL Injector☆81Updated last month