☆18Jan 14, 2026Updated last month
Alternatives and similar repositories for API-hashing
Users that are interested in API-hashing are comparing it to the libraries listed below
Sorting:
- ☆23Apr 28, 2024Updated last year
- A VSCode plugin to assist with BOF development.☆37Aug 14, 2024Updated last year
- BOF for C2 framework☆44Nov 9, 2024Updated last year
- A persistant Windows Service Proof of Concept, where the Service will run after Restart or Shutdown, and invoke a given software executab…☆37Sep 28, 2023Updated 2 years ago
- Small utility package for manipulating Windows process tokens☆26Apr 26, 2022Updated 3 years ago
- Generate Go bindings for shared C libraries.☆15Jul 13, 2024Updated last year
- ☆113Oct 10, 2022Updated 3 years ago
- 一个普通的BOF用来BypassUAC☆22Apr 6, 2024Updated last year
- Port of Mandiant ShellcodeHashes plugin from IDA to BinaryNinja☆11Jul 24, 2024Updated last year
- Code with Windows Hacker☆12Oct 14, 2022Updated 3 years ago
- MSI creator for exe setup/installer☆11Jun 27, 2023Updated 2 years ago
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆30Sep 24, 2025Updated 5 months ago
- Three different shellcode techniques on the Windows Kernel☆15Apr 8, 2025Updated 10 months ago
- maldev obviously☆28May 5, 2025Updated 10 months ago
- This is the Git repository for the Modern Red Teaming workshop given at SINCON2024.☆12May 23, 2024Updated last year
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆107Mar 8, 2023Updated 2 years ago
- Reverse SOCKS5 Proxy Written in Rust☆28Mar 9, 2021Updated 4 years ago
- ☆94May 26, 2023Updated 2 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆12Jan 9, 2024Updated 2 years ago
- A simple C2 using Google Translate Webpage for data evasion☆12Jan 30, 2023Updated 3 years ago
- ☆15Nov 24, 2022Updated 3 years ago
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆17Feb 3, 2025Updated last year
- Beacon Object Files (BOF) for Cobalt Strike.☆32Aug 23, 2024Updated last year
- Crystal Palace RDLL loader for Adaptix C2 with Ekko sleep obfuscation, IAT hooking via PICO, and per-section permission restoration☆75Updated this week
- Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar☆137Aug 10, 2024Updated last year
- Beacon Object File (BOF) Template☆64Feb 6, 2026Updated 3 weeks ago
- early cascade injection PoC based on Outflanks blog post, in rust☆62Nov 8, 2024Updated last year
- simple shellcode injector for Windows / Process Hollowing☆15Jun 26, 2024Updated last year
- 正确解析 _HEAP_VS_***符号 ,支持在最新win11 24h2 运行,替换windbg自带的!pool命令☆17Nov 30, 2024Updated last year
- Process Hollowing in Rust with Process Executable Relocation Support for both 32 and 64 bit architecture environments.☆22Jan 6, 2025Updated last year
- converts sRDI compatible dlls to shellcode☆35Jan 20, 2025Updated last year
- ☆22Jan 15, 2025Updated last year
- CVE-2018-6066 using VBA☆67Oct 24, 2022Updated 3 years ago
- A simple python script to check evil Visual Studio projects☆21Oct 13, 2023Updated 2 years ago
- Hessian UTF-8 Overlong Encoding☆21Mar 9, 2024Updated last year
- ☆20Feb 27, 2022Updated 4 years ago
- Self delete DLL (2)☆14Feb 15, 2024Updated 2 years ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆17Aug 14, 2023Updated 2 years ago
- Phunter is an osint tool allowing you to find various information via a phone number 🔎📞☆14Apr 7, 2024Updated last year