c3r3br4t3 / ShadowRDP

Related projects ⓘ

Alternatives and complementary repositories for ShadowRDP

• parzel / GoSleepyCrypt
  In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
  ☆39Updated 9 months ago
• REDMED-X / InjectKit
  Modified versions of the Cobalt Strike Process Injection Kit
  ☆87Updated 9 months ago
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆94Updated last year
• EspressoCake / Defender-Exclusions-Creator-BOF
  ☆75Updated last year
• ScriptIdiot / sleepmask_PatchlessHook
  Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW
  ☆78Updated last year
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆36Updated 9 months ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆68Updated 2 weeks ago
• eladshamir / SharpElevator
  SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and publishe…
  ☆49Updated 2 years ago
• dis0rder0x00 / ParentProcessManipulation-LNK
  Using LNK files and user input simulation to start processes under explorer.exe
  ☆23Updated last month
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆98Updated last year
• S4ntiagoP / freeBokuLoader
  A simple BOF that frees UDRLs
  ☆108Updated 2 years ago
• MrAle98 / BOF-RunPE
  ☆51Updated last year
• trustedsec / PPLFaultDumpBOF
  ☆132Updated last year
• Yair-Men / Passenger
  ProcExp Driver (Ab)use
  ☆20Updated last year
• dreamkinn / go-ThreadlessInject
  Golang implementation of @CCob's C# ThreadlessInject
  ☆30Updated 5 months ago
• snovvcrash / BOFs
  Beacon Object Files (not Buffer Overflows)
  ☆51Updated last year
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆29Updated last year
• safedv / Rustic64Shell
  64-bit, position-independent reverse tcp shell, built in Rust for Windows.
  ☆44Updated last month
• reveng007 / AMSI-patches-learned-till-now
  I have documented all of the AMSI patches that I learned till now
  ☆68Updated last year
• EspressoCake / BOF_NativeAPI_Definitions-VSCode
  A VSCode plugin to assist with BOF development.
  ☆30Updated 2 months ago
• werdhaihai / SharpAltShellCodeExec
  Alternative Shellcode Execution Via Callbacks in C# with P/Invoke
  ☆72Updated last year
• 0xthirteen / reg_snake
  Python tool to interact with WMI StdRegProv
  ☆38Updated last week
• Tw1sm / SQL-BOF
  Library of BOFs to interact with SQL servers
  ☆146Updated 5 months ago
• wolfcod / beacondbg
  Beacon Debugger
  ☆30Updated last week
• wolfcod / lsassdump
  lsassdump via RtlCreateProcessReflection and NanoDump
  ☆70Updated 3 weeks ago
• klezVirus / SharpLdapRelayScan
  C# Port of LdapRelayScan
  ☆77Updated 2 years ago
• MayerDaniel / profiler-lateral-movement
  Lateral Movement via the .NET Profiler
  ☆73Updated 5 months ago
• xforcered / BOFMask
  ☆117Updated last year
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆41Updated last year
• shantanu561993 / DLL-Sideload
  ☆38Updated last year