aaaddress1 / dnLauncherLinks
☆36Updated 3 years ago
Alternatives and similar repositories for dnLauncher
Users that are interested in dnLauncher are comparing it to the libraries listed below
Sorting:
- A small commented POC for removing API hooks placed by AV/EDR.☆34Updated 5 years ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42Updated 6 years ago
- A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯☆39Updated 4 years ago
- ☆23Updated 4 years ago
- Clone running process with ZwCreateProcess☆58Updated 4 years ago
- A simple COM server which provides a component to run shellcode☆140Updated 5 years ago
- ☆70Updated 8 months ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆44Updated 3 years ago
- Sysmon shenanigans☆66Updated 5 years ago
- ☆15Updated 4 years ago
- ☆62Updated 3 years ago
- Six cases demonstrating methods of optimizing GetProcAddress☆18Updated 3 years ago
- ☆41Updated 4 years ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆114Updated 4 years ago
- Weaponizing Gigabyte driver for priv escalation and bypass PPL☆69Updated 6 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆36Updated 4 years ago
- Recreating and reviewing the Windows persistence methods☆39Updated 3 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆57Updated 3 years ago
- ☆31Updated 5 years ago
- ☆37Updated 6 years ago
- ☆64Updated 2 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆97Updated 6 years ago
- A tool to create COM class/interface relationships in neo4j☆50Updated 3 years ago
- ☆83Updated last year
- ☆50Updated 5 years ago
- C++ function that will automagically unhook a specified Windows API☆62Updated 5 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Updated 3 years ago
- Resolve syscall numbers at runtime for all Windows versions.☆61Updated 11 months ago
- Loads .NET Assembly Via CLR Loader☆16Updated 6 years ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆104Updated 2 years ago