ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.
☆214Jan 3, 2024Updated 2 years ago
Alternatives and similar repositories for ulexecve
Users that are interested in ulexecve are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple reverse ssh/proxy implant PoC for *nix systems.☆57Jul 5, 2024Updated 2 years ago
- ☆327May 16, 2022Updated 4 years ago
- ☆57Apr 19, 2023Updated 3 years ago
- Linux Sleep Obfuscation☆129Jan 7, 2024Updated 2 years ago
- Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.☆285Feb 8, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆234Oct 18, 2022Updated 3 years ago
- reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support☆22Sep 15, 2021Updated 4 years ago
- A stealthy ELF loader - no files, no execve, no RWX☆175Dec 31, 2023Updated 2 years ago
- Python module for running BOFs☆80Nov 28, 2025Updated 8 months ago
- Replace the .txt section of the current loaded modules from \KnownDlls\☆307Sep 28, 2022Updated 3 years ago
- An implementation of execve() in user space☆35Oct 25, 2024Updated last year
- Cobalt Strike UDRL for memory scanner evasion.☆1,031Jun 4, 2024Updated 2 years ago
- A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.☆893Mar 21, 2025Updated last year
- TypeScript/JavaScript client libraries for Sliver☆28Jun 21, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Execute unmanaged Windows executables in CobaltStrike Beacons☆723Mar 4, 2023Updated 3 years ago
- More examples using the Impacket library designed for learning purposes.☆268Nov 4, 2022Updated 3 years ago
- ☆51Jun 28, 2022Updated 4 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆173Mar 15, 2023Updated 3 years ago
- If you have any questions, please open an issue.☆25Apr 6, 2022Updated 4 years ago
- Load a dynamic library from memory using a fuse mount☆33Sep 15, 2023Updated 2 years ago
- Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)☆370Mar 2, 2024Updated 2 years ago
- Adaptive DLL hijacking / dynamic export forwarding☆819Jul 6, 2020Updated 6 years ago
- Chrome cookie dumper☆18Jan 27, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Running .NET from VBA☆147Feb 11, 2023Updated 3 years ago
- Infect Shared Files In Memory for Lateral Movement☆192Dec 14, 2022Updated 3 years ago
- A CLI tool which can be used to inject JavaScript into arbitrary Chrome origins via the Chrome DevTools Protocol☆46Jan 18, 2021Updated 5 years ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆635Jan 2, 2025Updated last year
- AAD related enumeration in Nim☆132Sep 7, 2023Updated 2 years ago
- ☆1,844Aug 30, 2024Updated last year
- Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.☆128Apr 24, 2022Updated 4 years ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆538Aug 1, 2022Updated 4 years ago
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆677Dec 23, 2022Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Execute ELF files without dropping them on disk☆504Jun 28, 2024Updated 2 years ago
- ☆567Feb 22, 2024Updated 2 years ago
- ☆32Aug 14, 2020Updated 5 years ago
- Implements io.ReaderAt over raw memory.☆13Jun 26, 2020Updated 6 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Open-Source Shellcode & PE Packer☆2,124Feb 3, 2024Updated 2 years ago
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆347Sep 1, 2021Updated 4 years ago