load arbitrary dlls, call any exported function, calls execute inside g0 as normal syscalls do from the traditional route, no syscall or windows imports, exposes many convenience functions for winapi interaction :3
☆29May 4, 2026Updated 4 months ago
Alternatives and similar repositories for go-wincall
Users that are interested in go-wincall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- low-level windows networking library using afd.sys sockets and schannel tls. bypasses winsock, winhttp, wininet and other high-level netw…☆17Jul 15, 2026Updated 2 months ago
- A cryptographic payload loader and executor designed for advanced in-memory execution techniques. This project combines strong encryption…☆30Mar 2, 2026Updated 6 months ago
- go-native-syscall is Go (+ asm) Windows syscall library that resolves, hashes, caches, and invokes direct (and indirect now) NT calls wit …☆18Aug 13, 2025Updated last year
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated last year
- A cPanel and WHM authentication bypassing tool☆528Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A BOF designed to inspect processes memory and addresses☆40Apr 19, 2026Updated 5 months ago
- Windows Application Attack Surface Analyzer☆27Feb 22, 2024Updated 2 years ago
- ☆51Jun 12, 2026Updated 3 months ago
- DPAPI research and offensive tools☆17Feb 12, 2026Updated 7 months ago
- Simple KDMapper driver dumper. Unlike other dumpers, this dumper dumps the PE headers of the image too.☆18May 10, 2024Updated 2 years ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 7 months ago
- Fork of pkg/debug that adds some additional functionality.☆130Feb 14, 2026Updated 7 months ago
- ShadowStrike A Windows EDR Platform☆37Updated this week
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆17Jul 23, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Async BOF that monitors USB device connect/disconnect events, reports device information and performs actions on connected USB storage vo…☆57Jul 23, 2026Updated last month
- COM Windows Persistence Technique☆89Apr 27, 2026Updated 4 months ago
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆20Sep 2, 2025Updated last year
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆277Jun 18, 2025Updated last year
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Process Hollowing in Rust with Process Executable Relocation Support for both 32 and 64 bit architecture environments.☆26Jan 6, 2025Updated last year
- StoneKeeper C2, an experimental EDR evasion framework for research purposes☆206Dec 25, 2024Updated last year
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence a…☆21Jul 6, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- MacOS Shared Library to Shellcode Loader☆90Feb 23, 2026Updated 6 months ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆80Updated this week
- A portable bridge between your C2 infrastructure and Discord, built for quick and lightweight operations.☆13Jun 3, 2025Updated last year
- Print the stack trace☆51Mar 8, 2026Updated 6 months ago
- first public in-process reflective PE loader for .NET NativeAOT binaries. maps a NativeAOT executable into the current process and execut…☆28Mar 28, 2026Updated 5 months ago
- Async BOF to automatically extract or renew Kerberos TGTs on a target system.☆135Jul 23, 2026Updated last month
- Azure Blob Storage C2 Profile for Mythic☆30Jan 30, 2026Updated 7 months ago
- Fully documented, updated, and comprehensive utilities for Windows 32-bit Wow64 processes☆19Aug 15, 2025Updated last year
- Havoc C2 BOF port of the KslD.sys BYOVD technique. Credential extraction from lsass via physical memory — no OpenProcess, no auditable AP…☆146Apr 22, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- Short Programs For Spreading Malware☆16Aug 11, 2021Updated 5 years ago
- Beacon Object File (BOF) for identifying dependent child services of a given parent.☆18Jun 20, 2025Updated last year
- Advanced OPSEC fork of Donut. Features a Custom in-memory CLR Host, Tail-Jump ETW bypasses, and zero-patch AMSI evasion for stealthy shel…☆73Jun 24, 2026Updated 2 months ago
- Templates for developing your own listeners and agents for AdaptixC2.☆60Sep 6, 2026Updated 2 weeks ago
- PoC on JIT Flow Redirection and .NET Reflection for Analyzing In-Memory Telemetry Interfaces (AMSI/ETW)☆18Jun 24, 2026Updated 2 months ago
- Opengraph-Compatible JSON Generator for BloodHound☆28Mar 30, 2026Updated 5 months ago