64bit WIndows 10 shellcode dat pops dat calc - Dynamic & Null Free
☆63Mar 8, 2023Updated 3 years ago
Alternatives and similar repositories for x64win-DynamicNoNull-WinExec-PopCalc-Shellcode
Users that are interested in x64win-DynamicNoNull-WinExec-PopCalc-Shellcode are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cobalt Strike BOF that uses a custom ASM HalosGate & HellsGate syscaller to return a list of processes☆107Mar 8, 2023Updated 3 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆114May 21, 2023Updated 3 years ago
- Splitting and executing shellcode across multiple pages☆102Jun 8, 2023Updated 3 years ago
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 3 years ago
- Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…☆54Apr 10, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Hacky code for extracting calls in DLLs by function☆16Jun 3, 2022Updated 4 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆39Dec 31, 2020Updated 5 years ago
- A Mythic Agent written in PIC C.☆214Feb 4, 2025Updated last year
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52May 16, 2024Updated 2 years ago
- Shellcode execution via x86 inline assembly based on MSVC syntax☆16Apr 26, 2023Updated 3 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆178Feb 10, 2023Updated 3 years ago
- Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html☆164Apr 21, 2022Updated 4 years ago
- ☆123Dec 23, 2022Updated 3 years ago
- Dynamic Function Resolution (DFR) definitions for Crystal Palace☆12Dec 19, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Purple Team Dropper generator using open source templates.☆18May 23, 2024Updated 2 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆87Mar 19, 2023Updated 3 years ago
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆68May 2, 2023Updated 3 years ago
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆99Feb 28, 2023Updated 3 years ago
- NTAPI hook bypass with (semi) legit stack trace☆18May 9, 2023Updated 3 years ago
- ☆131Jun 28, 2023Updated 3 years ago
- Hiding shellcode in plain sight within a large memory region. Inspired by technique used by Raspberry Robin's Roshtyak☆209Nov 12, 2025Updated 11 months ago
- A simple BOF that frees UDRLs☆124May 29, 2022Updated 4 years ago
- ☆21May 28, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆19May 22, 2024Updated 2 years ago
- Titan: A generic user defined reflective DLL for Cobalt Strike☆84Nov 20, 2022Updated 3 years ago
- ☆507Aug 14, 2022Updated 4 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆36Jul 27, 2021Updated 5 years ago
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆38May 3, 2021Updated 5 years ago
- Finding Truth in the Shadows☆126Jan 26, 2023Updated 3 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- havoc2nginx is a simple python script that converts Havoc Framework's yaotl malleable c2 profile to Nginx configuration file format. Most…☆12May 8, 2023Updated 3 years ago
- .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).☆29Jun 14, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap☆247Aug 2, 2023Updated 3 years ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆142Sep 12, 2022Updated 4 years ago
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆374May 24, 2022Updated 4 years ago
- Various methods of executing shellcode☆75Mar 27, 2023Updated 3 years ago
- CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…☆242Jan 4, 2023Updated 3 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 4 years ago
- CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback☆67Sep 15, 2022Updated 4 years ago