64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"
☆38May 3, 2021Updated 5 years ago
Alternatives and similar repositories for x64win-AddRdpAdminShellcode
Users that are interested in x64win-AddRdpAdminShellcode are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆41Sep 23, 2021Updated 5 years ago
- A shellcode-to-binary generator for Windows☆12Feb 26, 2021Updated 5 years ago
- 64bit Windows 10 shellcode that injects all processes with Meterpreter reverse shells.☆130Mar 8, 2023Updated 3 years ago
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 10 months ago
- Runpe + DInvoke + Syscall☆18Jun 18, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Finding your secret(Credential, API Key, AWS Key, Token, etc.) in your source code, files☆18Jan 26, 2026Updated 9 months ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Nov 17, 2019Updated 6 years ago
- A python metamorphic engine for PE/PE+ files.☆15Jan 1, 2023Updated 3 years ago
- Basic c2-matrix analysis enviroment using Suricata + Wazuh + Elastic stack☆13Apr 18, 2020Updated 6 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- ☆11Feb 12, 2023Updated 3 years ago
- Collection of shellcode injection and execution techniques☆17Mar 17, 2026Updated 7 months ago
- Artemis - C++ Hell's Gate Syscall Implementation☆35Aug 16, 2023Updated 3 years ago
- 64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free☆63Mar 8, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆107Mar 8, 2023Updated 3 years ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆106Mar 8, 2023Updated 3 years ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆35Sep 15, 2022Updated 4 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- IAT Unhooking proof-of-concept☆33Apr 7, 2024Updated 2 years ago
- abusing Process Hacker driver to terminate other processes (BYOVD)☆83May 23, 2023Updated 3 years ago
- Terminate the eventlog thread to disable the windows eventlog☆21Apr 1, 2020Updated 6 years ago
- Quick lookup files for SUNBURST Backdoor☆12Dec 15, 2020Updated 5 years ago
- GetSimple CMS Custom JS Plugin Exploit RCE Chain☆11Mar 8, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A custom run space to bypass AMSI and Constrained Language mode in PowerShell.☆20May 17, 2023Updated 3 years ago
- 🚧 C# UAC Bypass technique using mock directories 🚧☆27Jul 27, 2022Updated 4 years ago
- A tool to subvert the Windows image loader for auxiliary payload execution.☆20Sep 9, 2026Updated last month
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- A quick bash script that I created in order to speed up the creation of usable kali boxes.☆16Oct 29, 2021Updated 5 years ago
- Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.☆85May 3, 2023Updated 3 years ago
- John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating s…☆11Jan 20, 2021Updated 5 years ago
- Repository for dirty scripts and PoCs☆21Feb 18, 2025Updated last year
- A proof-of-concept to demonstrate randomized execution paths and their impact on call stack signatures — ideal for EDR testing, behavior-…☆24Jan 17, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Shellcode launcher for AV bypass☆212Dec 23, 2023Updated 2 years ago
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- C# loader capable of running stage-1 from remote url, file path as well as file share☆15Feb 8, 2023Updated 3 years ago
- ☆32Aug 10, 2019Updated 7 years ago
- Run PowerShell command without invoking powershell.exe☆36Nov 22, 2021Updated 4 years ago
- Companion PoC for the "Adventures in Dynamic Evasion" blog post☆127May 25, 2021Updated 5 years ago
- Encrypted Shellcode Loader Generator☆22Jan 29, 2019Updated 7 years ago