c1y2m3 / SimpleShellcode
利用图片隐写术来远程动态加载shellcode
☆95Updated 2 years ago
Alternatives and similar repositories for SimpleShellcode:
Users that are interested in SimpleShellcode are comparing it to the libraries listed below
- 远程创建任务计划工具☆183Updated 2 years ago
- Cobalt Strike 二开项目☆181Updated 2 years ago
- ☆154Updated 8 months ago
- 白加黑的快速生成器(针对IAT类型)☆92Updated 2 years ago
- 一款基于Http.sys的利用工具☆190Updated 2 years ago
- 关于RPC一些绕EDR的tips☆164Updated 2 years ago
- Remote Download and Memory Execute for shellcode framework☆91Updated 2 years ago
- C++枚举磁盘列表、遍历指定盘搜索特定类型文件/微信导出密钥,文件回传等功能☆153Updated 2 years ago
- Linux下用于远程加载可执行文件以达到内存加载的目的☆201Updated 2 years ago
- 利用inline hook免杀绕过360,vt爆3个☆62Updated 2 years ago
- 利用白名单文件 cdb.exe 执行 shellcode☆213Updated 2 years ago
- [windows]pe -> shellcode -> shellcodeLoader -> (pe2shellcode go on?)☆76Updated 3 years ago
- Windows一键检测应急响应服务工具/r3数据采集☆98Updated 2 years ago
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆147Updated 7 months ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法(以360安全卫士和360杀毒为例)☆127Updated last year
- 使用Visral Studio开发ShellCode☆185Updated last year
- 一个加壳工具☆62Updated 5 years ago
- 记录一下我学习的Win32CPP☆54Updated 3 years ago
- 40行代码检测到大部分CobaltStrike的shellcode☆285Updated 3 years ago
- ☆55Updated 7 months ago
- ☆76Updated 5 years ago
- 通过C/C++实现的 Windows RID Hijacking persistence technique (RID劫持 影子账户 账户克隆).☆76Updated 3 years ago
- 免杀死亡笔记☆116Updated 2 years ago
- ☆91Updated 3 years ago
- 过360拦截加载无驱动签名☆60Updated 3 years ago
- 通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化☆334Updated 2 years ago
- 通过WindowsAPI获取用户凭证,并保存到文件中☆194Updated 8 months ago
- 自动化dll劫持测试工具。Automated dll hijacking testing tool☆81Updated 3 years ago
- ☆11Updated 3 years ago
- SysEye是一个window上的基于att&ck现代EDR设计思想的威胁响应工具.有效检测常见的未知威胁与已知威胁.防守方的利剑☆64Updated 2 years ago