load arbitrary dlls, call any exported function, calls execute inside g0 as normal syscalls do from the traditional route, no syscall or windows imports, exposes many convenience functions for winapi interaction :3
☆30May 4, 2026Updated 5 months ago
Alternatives and similar repositories for go-wincall
Users that are interested in go-wincall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- low-level windows networking library using afd.sys sockets and schannel tls. bypasses winsock, winhttp, wininet and other high-level netw…☆18Jul 15, 2026Updated 3 months ago
- a modular reflective dll/pe loader that allows for easy chaining of dlls and pes together in a single or remote process with tight memory…☆15Feb 8, 2026Updated 8 months ago
- A cryptographic payload loader and executor designed for advanced in-memory execution techniques. This project combines strong encryption…☆32Mar 2, 2026Updated 8 months ago
- tool to extract LSA credentials using a vulnerable microsoft signed windows defender driver in a stealthy manner☆19Apr 12, 2026Updated 6 months ago
- go-native-syscall is Go (+ asm) Windows syscall library that resolves, hashes, caches, and invokes direct (and indirect now) NT calls wit…☆18Aug 13, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated last year
- WinDumper is a Windows utility for resolving unexported ntdll.dll functions using portable AOB signatures.☆14Dec 30, 2025Updated 10 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- A PoC of Go AES with a key protected in memory☆13May 10, 2018Updated 8 years ago
- Windows Application Attack Surface Analyzer☆27Feb 22, 2024Updated 2 years ago
- ☆52Jun 12, 2026Updated 4 months ago
- Examples how to use a Assm (Assembly) in a go.☆26Apr 21, 2025Updated last year
- Fork of pkg/debug that adds some additional functionality.☆130Feb 14, 2026Updated 8 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- DPAPI research and offensive tools☆17Feb 12, 2026Updated 8 months ago
- A Free Open sourced crypter that builds a output .NET .exe Stub (Updated whenever I feel like it)☆23Oct 18, 2025Updated last year
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- COM Windows Persistence Technique☆91Apr 27, 2026Updated 6 months ago
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆58Jul 23, 2026Updated 3 months ago
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆279Jun 18, 2025Updated last year
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- ShadowStrike A Windows EDR Platform☆42Updated this week
- Process Hollowing in Rust with Process Executable Relocation Support for both 32 and 64 bit architecture environments.☆26Jan 6, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Print the stack trace☆51Mar 8, 2026Updated 7 months ago
- Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence a…☆21Jul 6, 2024Updated 2 years ago
- StoneKeeper C2, an experimental EDR evasion framework for research purposes☆205Dec 25, 2024Updated last year
- Agent Linux for AdaptixC2☆25Updated this week
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- A powerful, modular, lightweight and efficient command & control framework written in Nim.☆229Nov 3, 2025Updated last year
- RunPE implementation with multiple evasive techniques (2)☆15Sep 25, 2025Updated last year
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Usermode detector that catches indirect syscalls. Traps Hell's Hall, Tartarus' Gate, RecycledGate, and VEH syscalls & Many more.☆91Jun 15, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Fork of Wireguard's Memmod☆17Feb 25, 2023Updated 3 years ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆139Jul 23, 2026Updated 3 months ago
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated last month
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆29Mar 28, 2026Updated 7 months ago
- A portable bridge between your C2 infrastructure and Discord, built for quick and lightweight operations.☆13Jun 3, 2025Updated last year
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆148Apr 22, 2026Updated 6 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year