arget13 / memdlopen
dlopen() filelessly a shared object or even a program (and run it).
☆54Updated last year
Alternatives and similar repositories for memdlopen:
Users that are interested in memdlopen are comparing it to the libraries listed below
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆78Updated 2 years ago
- ☆61Updated 10 months ago
- ☆98Updated last year
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆76Updated last month
- Splitting and executing shellcode across multiple pages☆100Updated last year
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆89Updated 10 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆81Updated 6 months ago
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆113Updated 2 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- An example reference design for a proposed BOF PE☆159Updated last week
- Threadless shellcode injection tool☆63Updated 8 months ago
- Create Anti-Copy DRM Malware☆55Updated 8 months ago
- A simple ExternalC2 POC for Havoc C2. Communicates over Notion using a custom python agent, handler and extc2 channel. Not operationally …☆85Updated 2 years ago
- A nice process dumping tool☆81Updated 2 years ago
- Slides for COM Hijacking AV/EDR Talk on 38c3☆73Updated 3 months ago
- A COFF Loader written in Rust☆95Updated 2 weeks ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated last year
- A simple C++ Windows tool to get information about processes exposing named pipes.☆37Updated last month
- Sliver agent rewritten in C++☆45Updated 7 months ago
- ☆135Updated last year
- shell code example☆34Updated last week
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆100Updated 2 years ago
- ☆55Updated 3 months ago
- ☆122Updated last year
- Mythic C2 Agent written in x64 PIC C☆71Updated 2 months ago
- I have documented all of the AMSI patches that I learned till now☆71Updated 3 weeks ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆91Updated 2 years ago
- Linux Sleep Obfuscation☆95Updated last year
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆151Updated last year
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆86Updated 3 months ago