A memory-based evasion technique which makes shellcode invisible from process start to end.
☆17Aug 14, 2023Updated 3 years ago
Alternatives and similar repositories for phantom
Users that are interested in phantom are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dll hijack -- just one macro☆13Jul 3, 2023Updated 3 years ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- Change hash for a signed pe☆18Jul 18, 2023Updated 3 years ago
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆24May 10, 2021Updated 5 years ago
- 免杀绕过某60，过核晶，vt爆6个☆13May 1, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆19Jun 20, 2025Updated last year
- 10.15免杀绕过defender 360☆19Oct 16, 2023Updated 3 years ago
- Some anti-sandbox codes, copy directly to strengthen your own ShellCode☆12Dec 26, 2022Updated 3 years ago
- various methods of making API calls☆19Feb 1, 2025Updated last year
- A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/☆193Sep 9, 2021Updated 5 years ago
- A simple BOF (Beacon Object File) to search files in the system☆20Dec 2, 2023Updated 2 years ago
- Event Tracing for Windows EDR bypass in Rust (usermode)☆41Jun 9, 2024Updated 2 years ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Periodically check hashcat cracking progress and notify of success.☆10Dec 18, 2018Updated 7 years ago
- ☆14Apr 24, 2026Updated 6 months ago
- This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools.…☆15Dec 16, 2023Updated 2 years ago
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆68May 2, 2023Updated 3 years ago
- Bypass EDR Create TaskServers☆38Dec 24, 2022Updated 3 years ago
- 个人学习使用，二开DcRAT，主要是增加了功能性插件☆16Jan 26, 2024Updated 2 years ago
- Source files for my posts☆17Jun 20, 2023Updated 3 years ago
- A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.☆167Oct 31, 2024Updated last year
- A BOF to create a scheduled task using a COM object.☆23Sep 1, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆19Feb 22, 2025Updated last year
- ☆10Sep 19, 2024Updated 2 years ago
- Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process☆47Mar 15, 2023Updated 3 years ago
- (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…☆140Mar 3, 2025Updated last year
- Next-Generation BOF Template | BOF Linter | Obj Rewriter☆61Dec 4, 2025Updated 10 months ago
- ☆18Aug 8, 2024Updated 2 years ago
- 🤖 Kill The Protected Process 🤖☆437May 29, 2024Updated 2 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- Rehashing APIs to prevent hash based detection☆14Jan 7, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆49Jan 25, 2025Updated last year
- A Rust-based dropper for shellcode payloads.☆73Mar 21, 2025Updated last year
- A Powershell module including a couple of cmdlets for EWS Enum/Exploitation.☆19Aug 6, 2019Updated 7 years ago
- A VSCode plugin to assist with BOF development.☆37Aug 14, 2024Updated 2 years ago
- Aggressor Notification Scripts for cobaltstrike via slack & discord☆15Nov 27, 2025Updated 11 months ago
- BOF for C2 framework☆45Nov 9, 2024Updated last year
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆43Dec 1, 2025Updated 10 months ago