basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender
☆11Updated 6 years ago
Alternatives and similar repositories for HostingCLR-Bypass-AMSI-Windows-Defender
Users that are interested in HostingCLR-Bypass-AMSI-Windows-Defender are comparing it to the libraries listed below
Sorting:
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- Execute an arbitrary command within the context of another process☆20Updated 5 years ago
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆31Updated 5 years ago
- Self-Loading Registration Free COM Functions☆11Updated 5 years ago
- Encrypted Shellcode Loader Generator☆22Updated 6 years ago
- Maintain Windows Persistence with an evil Netshell Helper DLL☆12Updated 6 years ago
- Windows Shellcode Testing Utility to Run Shellcode From A File☆12Updated 5 years ago
- An example of PE hollowing injection technique☆23Updated 5 years ago
- WORK IN PROGRESS. RAT written in C++ using Win32 API☆18Updated 5 years ago
- Collection of shellcode injection and execution techniques☆17Updated 3 years ago
- The source code of the SLAE assignments documented at https://rastating.github.io/☆23Updated 6 years ago
- Kill AMSI in a remote process PoC☆10Updated 6 years ago
- ☆54Updated 6 years ago
- ☆12Updated 5 years ago
- Kernel mode windows NT API logger☆22Updated 5 years ago
- C# DCOM Execution☆18Updated 5 years ago
- Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers☆18Updated 3 years ago
- CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe☆16Updated 5 years ago
- Loads shellcode from a resource file.☆21Updated 5 years ago
- This is a project to receive Base64 data and decode it in process☆15Updated 5 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆12Updated 6 years ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆14Updated 6 years ago
- ☆14Updated 5 years ago
- Remote PE reflective injection with a simple reflective loader☆31Updated 5 years ago
- Enumerate all processes and get specified file's handle,then close it.☆11Updated 6 years ago
- Loader and RunPE file executer☆17Updated 5 years ago
- Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.☆23Updated 4 years ago
- Use to generate DLL through Visual Studio☆18Updated 7 years ago
- ☆45Updated 6 years ago
- Execute shellcode with syscalls from C# .dll☆12Updated 5 years ago