brosck / APIHookingDetectorLinks
「⚙️」Detect which native Windows API's (NtAPI) are being hooked
☆38Updated 5 months ago
Alternatives and similar repositories for APIHookingDetector
Users that are interested in APIHookingDetector are comparing it to the libraries listed below
Sorting:
- ☆55Updated 7 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 10 months ago
- Rewrite to fit my needs☆28Updated 10 months ago
- A small Aggressor script to help Red Teams identify foreign processes on a host machine☆85Updated 2 years ago
- in-process powershell runner for BRC4☆45Updated last year
- These are the slide decks and source code for Brute Ratel Seminar conducted on 24th August 2023. The youtube video for the seminar can be…☆19Updated last year
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆24Updated 8 months ago
- ☆48Updated last year
- ☆59Updated last year
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year
- ☆48Updated 2 years ago
- A pure C version of SymProcAddress☆27Updated last year
- Section-based payload obfuscation technique for x64☆59Updated 9 months ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆23Updated last year
- Windows Thread Pool Injection Havoc Implementation☆29Updated last year
- ☆29Updated last year
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆48Updated last year
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆28Updated 4 months ago
- ☆34Updated 2 months ago
- Unhook Ntdll.dll, Go & C++.☆22Updated last month
- Example of using Sleep to create better named pipes.☆41Updated last year
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆26Updated 2 years ago
- .NET port of Leron Gray's azbelt tool.☆26Updated last year
- Proxy function calls through the thread pool with ease☆28Updated 3 months ago
- DFSCoerce exe revisited version with custom authentication☆40Updated last year
- Sniffing files generator☆58Updated 3 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆82Updated 7 months ago
- Reasonably undetected shellcode stager and executer.☆37Updated last week
- BOF for C2 framework☆41Updated 6 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆37Updated 8 months ago