basharbachir / HostingCLR-Bypass-AMSI-Windows-Defender
☆11Updated 5 years ago
Alternatives and similar repositories for HostingCLR-Bypass-AMSI-Windows-Defender:
Users that are interested in HostingCLR-Bypass-AMSI-Windows-Defender are comparing it to the libraries listed below
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- Execute an arbitrary command within the context of another process☆20Updated 5 years ago
- Encrypted Shellcode Loader Generator☆22Updated 6 years ago
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆30Updated 5 years ago
- Maintain Windows Persistence with an evil Netshell Helper DLL☆12Updated 6 years ago
- Self-Loading Registration Free COM Functions☆11Updated 5 years ago
- Windows Shellcode Testing Utility to Run Shellcode From A File☆12Updated 5 years ago
- Execute shellcode with syscalls from C# .dll☆12Updated 4 years ago
- Kill AMSI in a remote process PoC☆10Updated 6 years ago
- ☆14Updated 5 years ago
- WORK IN PROGRESS. RAT written in C++ using Win32 API☆18Updated 5 years ago
- ☆54Updated 6 years ago
- Enumerate all processes and get specified file's handle,then close it.☆11Updated 6 years ago
- Simple remote administration tool. Written in c++ and MASM.☆18Updated 6 years ago
- SharpSploit is a .NET post-exploitation library written in C#☆16Updated 4 years ago
- CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe☆16Updated 5 years ago
- An Advanced C# .NET Rat, It’s Stable and Contains Many Features.☆7Updated 6 years ago
- ☆21Updated 3 years ago
- An example of PE hollowing injection technique☆23Updated 5 years ago
- The source code of the SLAE assignments documented at https://rastating.github.io/☆23Updated 6 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆12Updated 6 years ago
- Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.☆23Updated 4 years ago
- Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers☆18Updated 3 years ago
- Collection of shellcode injection and execution techniques☆16Updated 3 years ago
- Takes raw hex shellcode (e.g. msfvenom hex format) from a cmd line arg, text file, or URL download and runs it.☆19Updated 6 years ago
- ☆11Updated 5 years ago
- Example of async client/server sockets in .NET 5☆16Updated 3 years ago
- A VBA implementation of the RunPE technique or how to bypass application whitelisting.☆14Updated 6 years ago
- Kernel mode windows NT API logger☆22Updated 5 years ago
- Use to generate DLL through Visual Studio☆18Updated 7 years ago