Advanced Sandbox Detection Techniques using C
☆38Sep 6, 2026Updated last month
Alternatives and similar repositories for Sandbox-Detection-Techniques
Users that are interested in Sandbox-Detection-Techniques are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- use python on windows with full submodule support without installation☆30Jan 23, 2025Updated last year
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 9 months ago
- ☆16Jan 15, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Offensive Assembly code snippets.☆15Jul 12, 2023Updated 3 years ago
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆30Jul 11, 2025Updated last year
- Reproducing the SkeletonKey malware.☆12Apr 6, 2024Updated 2 years ago
- POC Utilizing the new SleepMask-VS kit to utilize RC4 encryption.☆12Mar 4, 2025Updated last year
- Progressing on my malware development journey.☆17Aug 20, 2024Updated 2 years ago
- ☆72Jul 12, 2026Updated 3 months ago
- BOF to manage Active Directory Integrated DNS (ADIDNS)☆28Jul 28, 2025Updated last year
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆19Mar 19, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆11Feb 12, 2023Updated 3 years ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- JSHawk is a powerful, context-aware JavaScript security scanner that hunts for exposed credentials, API keys, and sensitive information i…☆17Apr 13, 2026Updated 6 months ago
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 8 months ago
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆17Mar 24, 2026Updated 7 months ago
- A lexer and parser for Sleep☆20Feb 20, 2026Updated 8 months ago
- Use of in-memory string scans to outsmart reverse engineers☆20Nov 20, 2024Updated last year
- Evasive loader for .NET Framework assemblies☆53May 14, 2026Updated 5 months ago
- Repo to the corresponding blog post about implant P2P communications.☆13Dec 7, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hacky code for extracting calls in DLLs by function☆16Jun 3, 2022Updated 4 years ago
- Random BOFs for LDAP tradecraft☆74Sep 9, 2025Updated last year
- RunPE implementation with multiple evasive techniques (2)☆14Sep 25, 2025Updated last year
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 9 months ago
- A BOF to create a scheduled task using a COM object.☆23Sep 1, 2026Updated last month
- Rasta's mouse AMSI patch but with function that makes it undetectable.☆14Apr 21, 2021Updated 5 years ago
- Things i do because i saw it on twitter on a weekend☆56Jul 20, 2025Updated last year
- A C Implementation for using a new method to invoke undetectable indirect syscalls☆19Dec 2, 2025Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Periodically check hashcat cracking progress and notify of success.☆10Dec 18, 2018Updated 7 years ago
- Malware persistence via COM DLL hijacking. C++ implementation example☆15May 2, 2022Updated 4 years ago
- Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueAp…☆81Feb 17, 2026Updated 8 months ago
- Sophisticated In-Memory PE loader for Cobalt Strike☆24Jan 24, 2026Updated 9 months ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- Advanced call stack manipulation techniques for evading EDR/XDR on Windows ARM64 systems☆25Aug 22, 2025Updated last year
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆39Apr 14, 2026Updated 6 months ago