brosck / FrostyLinks
γπ§γRing 3 Rootkit for Windows 10
β60Updated last year
Alternatives and similar repositories for Frosty
Users that are interested in Frosty are comparing it to the libraries listed below
Sorting:
- Kernel Mode Driver for Elevating Process Privilegesβ134Updated 2 years ago
- Windows AppLocker Driver (appid.sys) LPEβ71Updated last year
- γβοΈγRing 0 Rootkit for Linux Kernels x86/x86_64 5.x/6.xβ26Updated 9 months ago
- Bypass Malware Sandbox Evasion Ram checkβ141Updated 3 years ago
- XOR decrypting shellcode using the GPU with OpenCL.β118Updated 7 months ago
- β50Updated 3 years ago
- Implementation of Indirect Syscall technique to pop a calc.exeβ113Updated last year
- Create Anti-Copy DRM Malwareβ70Updated last year
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.β66Updated 2 years ago
- BYOVD Technique Example using viragt64 driverβ65Updated last year
- Splitting and executing shellcode across multiple pagesβ103Updated 2 years ago
- A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.β111Updated last year
- This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process holβ¦β70Updated last year
- Basic interactive Windows kernel offensive toolkit written in Cβ135Updated 3 months ago
- Various methods of executing shellcodeβ73Updated 2 years ago
- MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploitβ41Updated 2 years ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loaderβ64Updated 2 years ago
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".β86Updated 2 years ago
- Crossplatform tool for inject shellcode into .exe and .dll binaries (x86 and x64)β74Updated 2 weeks ago
- Standalone Metasploit-like XOR encoder for shellcodeβ50Updated last year
- User Mode Windows Rootkitβ68Updated 2 years ago
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader featureβ102Updated 2 years ago
- Plantronics Desktop Hub LPEβ37Updated last year
- π‘οΈ A multi-user malleable C2 framework targeting Windows. Written in C++ and Pythonβ45Updated last year
- Linux Sleep Obfuscationβ107Updated 2 years ago
- β89Updated 2 years ago
- Rex Shellcode Loader for AV/EDR evasionβ35Updated last year
- Identify and exploit leaked handles for local privilege escalation.β111Updated 2 years ago
- Persistence via Shell Extensionsβ63Updated 2 years ago
- Simple PoC to locate hooked functions by EDR in ntdll.dllβ45Updated 2 years ago