Files for http://deniable.org/windows/windows-callbacks
☆26Jul 9, 2020Updated 6 years ago
Alternatives and similar repositories for windows-ps-callbacks-experiments
Users that are interested in windows-ps-callbacks-experiments are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- Some stuff for PHD2021☆14May 21, 2025Updated last year
- LoadLibrary for offensive operations☆31Dec 14, 2021Updated 4 years ago
- A simple BOF implementation of klist using Windows API☆32Jul 7, 2022Updated 4 years ago
- ☆26Sep 29, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- ☆15Dec 16, 2020Updated 5 years ago
- RDI implementation in Nim☆64Dec 12, 2020Updated 5 years ago
- A BOF port of the research of @thefLinkk and @codewhitesec☆105Oct 12, 2021Updated 5 years ago
- ☆100Aug 23, 2021Updated 5 years ago
- A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/☆193Sep 9, 2021Updated 5 years ago
- Playing with PE's and Building Structures by Hand☆22Apr 21, 2022Updated 4 years ago
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 5 years ago
- ☆80Feb 12, 2022Updated 4 years ago
- Project to enumerate proxy configurations and generate shellcode from CobaltStrike☆137Nov 4, 2020Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Remove API hooks from a Beacon process.☆283Sep 18, 2021Updated 5 years ago
- SetWinEventHook Sample☆49Sep 23, 2023Updated 3 years ago
- 通过OXID解析器获取Windows远程主机上网卡地址☆25Aug 8, 2022Updated 4 years ago
- ☆115Oct 10, 2022Updated 4 years ago
- A simple DLL injection protection driver.☆12Dec 21, 2020Updated 5 years ago
- DLL Exports Extraction BOF with optional NTFS transactions.☆93Nov 5, 2021Updated 4 years ago
- WhoAmI by asking the LDAP service on a domain controller.☆67Feb 8, 2022Updated 4 years ago
- ☆16May 22, 2014Updated 12 years ago
- Dirfuzz by golang☆14Feb 28, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- golang amsi bypass☆29Dec 4, 2021Updated 4 years ago
- Nim version of MDSec's Parallel Syscall PoC☆124Apr 4, 2026Updated 6 months ago
- BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs☆186Oct 3, 2021Updated 5 years ago
- 开源！自主设计的badusb电路板☆10Mar 26, 2021Updated 5 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- 自不量力的mimikatz分离计划☆43Nov 28, 2021Updated 4 years ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 11 months ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆33Nov 14, 2020Updated 5 years ago
- A faithful transposition of the key features/functionality of @itm4n's PPLDump project as a BOF.☆142Sep 24, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Load and execute COFF files and Cobalt Strike BOFs in-memory☆226Sep 13, 2022Updated 4 years ago
- Collection of CobaltStrike beacon object files☆105Feb 14, 2022Updated 4 years ago
- Silence EDRs by removing kernel callbacks☆236Dec 7, 2020Updated 5 years ago
- Windows内核设计思想☆25Mar 23, 2017Updated 9 years ago
- POC to decrypt SmartDeploy encrypted credentials☆12Aug 13, 2025Updated last year
- This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…☆54Nov 4, 2021Updated 4 years ago
- Load .net assemblies from memory while having them appear to be loaded from an on-disk location.☆172May 5, 2021Updated 5 years ago