ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.
☆213Jan 3, 2024Updated 2 years ago
Alternatives and similar repositories for ulexecve
Users that are interested in ulexecve are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple reverse ssh/proxy implant PoC for *nix systems.☆57Jul 5, 2024Updated last year
- ☆326May 16, 2022Updated 4 years ago
- ☆57Apr 19, 2023Updated 3 years ago
- Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.☆284Feb 8, 2024Updated 2 years ago
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆234Oct 18, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support☆22Sep 15, 2021Updated 4 years ago
- Python module for running BOFs☆80Nov 28, 2025Updated 7 months ago
- A stealthy ELF loader - no files, no execve, no RWX☆175Dec 31, 2023Updated 2 years ago
- Replace the .txt section of the current loaded modules from \KnownDlls\☆306Sep 28, 2022Updated 3 years ago
- Linux Sleep Obfuscation☆130Jan 7, 2024Updated 2 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆1,020Jun 4, 2024Updated 2 years ago
- A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.☆889Mar 21, 2025Updated last year
- TypeScript/JavaScript client libraries for Sliver☆28Jun 21, 2026Updated last week
- More examples using the Impacket library designed for learning purposes.☆268Nov 4, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Execute unmanaged Windows executables in CobaltStrike Beacons☆724Mar 4, 2023Updated 3 years ago
- ☆51Jun 28, 2022Updated 4 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆174Mar 15, 2023Updated 3 years ago
- If you have any questions, please open an issue.☆25Apr 6, 2022Updated 4 years ago
- Load a dynamic library from memory using a fuse mount☆33Sep 15, 2023Updated 2 years ago
- Chrome cookie dumper☆18Jan 27, 2021Updated 5 years ago
- Adaptive DLL hijacking / dynamic export forwarding☆821Jul 6, 2020Updated 5 years ago
- Running .NET from VBA☆147Feb 11, 2023Updated 3 years ago
- Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)☆368Mar 2, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆626Jan 2, 2025Updated last year
- A CLI tool which can be used to inject JavaScript into arbitrary Chrome origins via the Chrome DevTools Protocol☆46Jan 18, 2021Updated 5 years ago
- Infect Shared Files In Memory for Lateral Movement☆192Dec 14, 2022Updated 3 years ago
- AAD related enumeration in Nim☆131Sep 7, 2023Updated 2 years ago
- Linux Process Injection via Seccomp Notifier☆95Dec 9, 2025Updated 6 months ago
- ☆1,823Aug 30, 2024Updated last year
- Implements io.ReaderAt over raw memory.☆13Jun 26, 2020Updated 6 years ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆538Aug 1, 2022Updated 3 years ago
- Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.☆129Apr 24, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆673Dec 23, 2022Updated 3 years ago
- ☆569Feb 22, 2024Updated 2 years ago
- Linker for Beacon Object Files☆189Jun 24, 2026Updated last week
- ☆33Aug 14, 2020Updated 5 years ago
- Execute ELF files without dropping them on disk☆504Jun 28, 2024Updated 2 years ago
- Open-Source Shellcode & PE Packer☆2,111Feb 3, 2024Updated 2 years ago
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆347Sep 1, 2021Updated 4 years ago