dlopen() filelessly a shared object or even a program (and run it).
☆60Aug 31, 2023Updated 3 years ago
Alternatives and similar repositories for memdlopen
Users that are interested in memdlopen are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A daemonized DDexec.☆30Mar 22, 2025Updated last year
- A technique to run binaries filelessly and stealthily on Linux by "overwriting" the shell's process with another.☆899Mar 21, 2025Updated last year
- A simple Linux in-memory .so loader☆35Mar 29, 2023Updated 3 years ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Feb 11, 2024Updated 2 years ago
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆16Nov 1, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Execute ELF files without dropping them on disk☆507Jun 28, 2024Updated 2 years ago
- abusing Process Hacker driver to terminate other processes (BYOVD)☆83May 23, 2023Updated 3 years ago
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆201Dec 27, 2023Updated 2 years ago
- A rust implementation of HackBrowserData☆17Oct 1, 2025Updated last year
- RegStrike is a .reg payload generator☆60Sep 19, 2023Updated 3 years ago
- Apply a divide and conquer approach to bypass EDRs☆289Oct 19, 2023Updated 3 years ago
- Using fibers to run in-memory code.☆247Oct 19, 2023Updated 3 years ago
- Malicious shortcut file builder for spear-phishing and red-team engagement.☆17Sep 11, 2023Updated 3 years ago
- ☆60Dec 15, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆329Jan 17, 2024Updated 2 years ago
- A mechanism that trampoline hooks functions in x86/x64 systems.☆21Oct 9, 2024Updated 2 years ago
- PE obfuscator with Evasion in mind☆211Apr 25, 2023Updated 3 years ago
- Exploit Proof-of-Concept code for XAMPP v3.3.0 — '.ini' Buffer Overflow (Unicode + SEH)☆13Nov 1, 2023Updated 3 years ago
- Reuse open handles to dynamically dump LSASS.☆246Apr 4, 2024Updated 2 years ago
- ☆22Jul 15, 2023Updated 3 years ago
- Linux Sleep Obfuscation☆129Jan 7, 2024Updated 2 years ago
- FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…☆48Apr 6, 2025Updated last year
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆35Mar 28, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆99Sep 1, 2024Updated 2 years ago
- An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component☆11Aug 5, 2023Updated 3 years ago
- Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver☆54Oct 19, 2023Updated 3 years ago
- 「💀」Proof of concept on BYOVD attack☆164Dec 7, 2024Updated last year
- miscellaneous codes☆38Sep 24, 2023Updated 3 years ago
- Lateral Movement Using DCOM and DLL Hijacking☆327Jun 18, 2023Updated 3 years ago
- ☆38May 20, 2023Updated 3 years ago
- ☆10Jul 1, 2023Updated 3 years ago
- ☆16Apr 21, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A PoC package for hosting the CLR and executing .NET from Go☆78Oct 4, 2026Updated 3 weeks ago
- Generate an obfuscated DLL that will disable AMSI & ETW☆335Jul 15, 2024Updated 2 years ago
- Templated Obfuscation example in C++ for protecting/hiding values in memory☆39Feb 1, 2025Updated last year
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- Load a dynamic library from memory using a fuse mount☆34Sep 15, 2023Updated 3 years ago
- A simple rpc2socks alternative in pure Go.☆31Jul 8, 2024Updated 2 years ago
- Updated version of a long known self deletion technique to work with 24H2.☆63Jun 9, 2025Updated last year