☆143Nov 16, 2024Updated last year
Alternatives and similar repositories for Linux-Process-Injection
Users that are interested in Linux-Process-Injection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux Process Injection via Seccomp Notifier☆97Dec 9, 2025Updated 10 months ago
- Linux Sleep Obfuscation☆129Jan 7, 2024Updated 2 years ago
- ElfDoor-gcc is an LD_PRELOAD that hijacks gcc to inject malicious code into binaries during linking, without touching the source code.☆136Apr 13, 2025Updated last year
- single-threaded event driven sleep obfuscation poc for linux☆49Jun 14, 2025Updated last year
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 11 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven☆278Oct 16, 2024Updated 2 years ago
- BOF for Havoc that copies locked Windows files (SAM, SYSTEM, NTDS.dit) via raw MFT parsing — no VSS, no Registry APIs, no PowerShell☆137Apr 6, 2026Updated 6 months ago
- (WIP) A Recursive UDRL leveraging smelly_vx's Feverdream trick.☆19Sep 3, 2025Updated last year
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆240Dec 17, 2025Updated 10 months ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆148Apr 22, 2026Updated 6 months ago
- early cascade injection PoC based on Outflanks blog post, in rust☆64Nov 8, 2024Updated last year
- Rusty DoublePulsar - Cobalt Strike User-Defined Reflective Loader (UDRL) in Rust (Codename: DoublePulsar)☆117May 14, 2026Updated 5 months ago
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆168Mar 26, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Async BOF that notifies the operator when a user connects to a local or remote target system.☆34Jul 30, 2026Updated 3 months ago
- ASPX Web Shell with COFF Loader☆137Mar 10, 2026Updated 7 months ago
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆184Apr 14, 2026Updated 6 months ago
- Finding Truth in the Shadows☆127Jan 26, 2023Updated 3 years ago
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆167Apr 15, 2026Updated 6 months ago
- SOCKS5 proxy tool that uses Azure Storage services as a means of communication.☆381Oct 26, 2026Updated last week
- Set of PoC to abuse Windows minifilters functionality☆112May 1, 2026Updated 6 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- An example reference design for a proposed BOF PE☆251Jan 23, 2026Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆85Aug 22, 2026Updated 2 months ago
- Mythic C2 Agent written in x64 PIC C☆85Jan 29, 2025Updated last year
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆46Oct 18, 2026Updated 2 weeks ago
- Position-independent Reflective Loader for macOS☆132Feb 19, 2026Updated 8 months ago
- Bring your own Unwind Data Framework☆179Mar 15, 2026Updated 7 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated 2 years ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆189May 17, 2023Updated 3 years ago
- Beacon Object File (BOF) Template☆99Oct 14, 2026Updated 3 weeks ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Atomic test units for BOF execution☆62Apr 26, 2026Updated 6 months ago
- tiny arm64 hooking library (WIP)☆29Dec 8, 2025Updated 10 months ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Playing around with Thread Context Hijacking. Building more evasive primitives to use as alternative for existing process injection techn…☆210Jun 17, 2025Updated last year
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆61Jul 4, 2026Updated 3 months ago
- A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass☆178Sep 22, 2025Updated last year