Zerx0r / dvenom
🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.
☆158Updated last year
Alternatives and similar repositories for dvenom:
Users that are interested in dvenom are comparing it to the libraries listed below
- ☆214Updated 11 months ago
- ☆162Updated last year
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆199Updated last year
- A Tool that aims to evade av with binary padding☆146Updated 8 months ago
- TeamServer and Client of Exploration Command and Control Framework☆105Updated last week
- An aggressor script that can help automate payload building in Cobalt Strike☆114Updated last year
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆236Updated 8 months ago
- Heavily obfuscated ASP web shell generation tool.☆163Updated 10 months ago
- Documents Exfiltration project for fun and educational purposes☆145Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆80Updated last year
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆53Updated last year
- Terminate AV/EDR Processes using kernel driver☆339Updated last year
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆150Updated 9 months ago
- AV bypass while you sip your Chai!☆218Updated 9 months ago
- Leverage WindowsApp createdump tool to obtain an lsass dump☆145Updated 5 months ago
- Evasive Golang Loader☆129Updated 7 months ago
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆205Updated last year
- Abuse leaked token handles.☆131Updated last year
- ☆221Updated 9 months ago
- Execute shellcode from a remote-hosted bin file using Winhttp.☆230Updated last year
- Execute shellcode files with rundll32☆190Updated last year
- Automated .NET AppDomain hijack payload generation☆120Updated 3 weeks ago
- A C# port from Invoke-GhostTask☆112Updated last year
- A shellcode injection tool showcasing various process injection techniques☆134Updated last year
- Github as C2 Demonstration , free API = free C2 Infrastructure☆135Updated last year
- C or BOF file to extract WebKit master key to decrypt user cookie☆188Updated 10 months ago
- Shaco is a linux agent for havoc☆156Updated last year
- Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver☆259Updated 3 weeks ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆209Updated last year
- A Rust implementation of GodPotato — abusing SeImpersonate to gain SYSTEM privileges. Includes a TCP-based reverse shell and indirect NTA…☆224Updated last month