call-042PE / UCantSeeM3
Hiding your process in ProcessHacker,Task Manager,etc by patching NtQuerySystemInformation
☆85Updated 3 years ago
Related projects: ⓘ
- A Bumblebee-inspired Crypter☆79Updated last year
- Fud Runpe Av Evasion / All Av Bypass☆31Updated last year
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆79Updated last year
- Bypassing windows uac, however its an old approach/method but its still unpatched ¯\_(ツ)_/¯☆41Updated 2 years ago
- Read my blog for more info -☆32Updated 3 years ago
- Bypass UAC by abusing the Internet Explorer Add-on installer☆50Updated 3 years ago
- ☆35Updated last year
- A proof of concept I developed to improve Gargoyle back in 2018 to achieve true memory obfuscation from position independent code☆33Updated last week
- Shellcodev is a tool designed to help and automate the process of shellcode creation.☆100Updated 11 months ago
- ☆105Updated this week
- ☆51Updated 7 months ago
- Extracting Syscall Stub, Modernized☆60Updated 2 years ago
- A string obfuscator for .NET apps, built to evade static string analysis.☆99Updated last year
- Recreating and reviewing the Windows persistence methods☆39Updated 2 years ago
- A multi-staged malware that contains a kernel mode rootkit and a remote system shell.☆65Updated 3 years ago
- ☆74Updated 3 weeks ago
- A tool implementing process hollowing making your PE polymorphic☆15Updated 4 years ago
- NINA: No Injection, No Allocation x64 Process Injection Technique☆193Updated 4 years ago
- Scan for potentially vulnerable drivers☆79Updated 2 years ago
- XssBot-Модульный резидентный бот с супер админкой☆12Updated last year
- A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.☆66Updated 2 years ago
- Small PoC of using a Microsoft signed executable as a lolbin.☆131Updated last year
- ☆75Updated this week
- Bypass Malware Time Delays☆96Updated last year
- ☆87Updated this week
- Dll injection through code page id modification in registry. Based on jonas lykk research☆116Updated last year
- Crossplatform tool for inject shellcode into .exe and .dll binaries (x86 and x64)☆52Updated 4 months ago
- A novel technique to communicate between threads using the standard ETHREAD structure☆108Updated 3 years ago
- How to spoof the command line when spawning a new process from C#.☆100Updated 2 years ago
- Unhook DLL via cleaning the DLL 's .text section☆9Updated 3 years ago