ulexecve is a userland execve() implementation which helps you execute arbitrary ELF binaries on Linux from userland without the binaries ever having to touch storage. This is useful for red-teaming and anti-forensics purposes.
☆214Jan 3, 2024Updated 2 years ago
Alternatives and similar repositories for ulexecve
Users that are interested in ulexecve are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple reverse ssh/proxy implant PoC for *nix systems.☆57Jul 5, 2024Updated 2 years ago
- ☆327May 16, 2022Updated 4 years ago
- ☆57Apr 19, 2023Updated 3 years ago
- Linux Sleep Obfuscation☆130Jan 7, 2024Updated 2 years ago
- Cobalt Strike Beacon Object Files (BOFs) written in rust with rust core and alloc.☆285Feb 8, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆234Oct 18, 2022Updated 3 years ago
- reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support☆22Sep 15, 2021Updated 4 years ago
- A stealthy ELF loader - no files, no execve, no RWX☆175Dec 31, 2023Updated 2 years ago
- Python module for running BOFs☆80Nov 28, 2025Updated 7 months ago
- Replace the .txt section of the current loaded modules from \KnownDlls\☆307Sep 28, 2022Updated 3 years ago
- An implementation of execve() in user space☆35Oct 25, 2024Updated last year
- Cobalt Strike UDRL for memory scanner evasion.☆1,029Jun 4, 2024Updated 2 years ago
- A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.☆891Mar 21, 2025Updated last year
- TypeScript/JavaScript client libraries for Sliver☆28Jun 21, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Execute unmanaged Windows executables in CobaltStrike Beacons☆724Mar 4, 2023Updated 3 years ago
- More examples using the Impacket library designed for learning purposes.☆268Nov 4, 2022Updated 3 years ago
- ☆51Jun 28, 2022Updated 4 years ago
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆174Mar 15, 2023Updated 3 years ago
- If you have any questions, please open an issue.☆25Apr 6, 2022Updated 4 years ago
- Load a dynamic library from memory using a fuse mount☆33Sep 15, 2023Updated 2 years ago
- Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)☆369Mar 2, 2024Updated 2 years ago
- Adaptive DLL hijacking / dynamic export forwarding☆821Jul 6, 2020Updated 6 years ago
- Chrome cookie dumper☆18Jan 27, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Running .NET from VBA☆147Feb 11, 2023Updated 3 years ago
- Infect Shared Files In Memory for Lateral Movement☆192Dec 14, 2022Updated 3 years ago
- A CLI tool which can be used to inject JavaScript into arbitrary Chrome origins via the Chrome DevTools Protocol☆46Jan 18, 2021Updated 5 years ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆631Jan 2, 2025Updated last year
- AAD related enumeration in Nim☆132Sep 7, 2023Updated 2 years ago
- ☆1,839Aug 30, 2024Updated last year
- Writeup of Payload Techniques in C involving Mutants, Session 1 -> Session 0 migration, and Self-Deletion of payloads.☆128Apr 24, 2022Updated 4 years ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆536Aug 1, 2022Updated 3 years ago
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆676Dec 23, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Execute ELF files without dropping them on disk☆504Jun 28, 2024Updated 2 years ago
- ☆568Feb 22, 2024Updated 2 years ago
- ☆33Aug 14, 2020Updated 5 years ago
- Implements io.ReaderAt over raw memory.☆13Jun 26, 2020Updated 6 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Open-Source Shellcode & PE Packer☆2,115Feb 3, 2024Updated 2 years ago
- LiquidSnake is a tool that allows operators to perform fileless lateral movement using WMI Event Subscriptions and GadgetToJScript☆347Sep 1, 2021Updated 4 years ago