cbrnrd / malikethLinks
π‘οΈ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python
β45Updated last year
Alternatives and similar repositories for maliketh
Users that are interested in maliketh are comparing it to the libraries listed below
Sorting:
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.β92Updated 5 months ago
- Shellcode Loader Utilizing ETW Eventsβ64Updated 5 months ago
- β35Updated 7 months ago
- a demo module for the kaine agent to execute and inject assembly modulesβ39Updated 11 months ago
- Windows AppLocker Driver (appid.sys) LPEβ62Updated last year
- shell code exampleβ61Updated 2 months ago
- Reimplementation of the KExecDD DSE bypass technique.β51Updated 10 months ago
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.β64Updated 2 years ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.β76Updated 11 months ago
- Exploiting the KsecDD Windows driver through Server Silosβ72Updated 8 months ago
- Splitting and executing shellcode across multiple pagesβ102Updated 2 years ago
- Various methods of executing shellcodeβ71Updated 2 years ago
- LKM rootkit for modern kernels, with DNS C2 and a simple web interfaceβ72Updated 3 weeks ago
- A POC of a new βthreadlessβ process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and reβ¦β25Updated last year
- Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.β48Updated last year
- In-memory hiding techniqueβ56Updated 6 months ago
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial β¦β49Updated 6 months ago
- Hooking KPRCB IdlePreselect function to gain execution inside PID 0.β65Updated 3 months ago
- BYOVD Technique Example using viragt64 driverβ46Updated last year
- Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modulesβ42Updated 2 years ago
- early cascade injection PoC based on Outflanks blog post, in rustβ60Updated 8 months ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loaderβ54Updated last year
- Classic Process Injection with Memory Evasion Techniques implemantationβ70Updated last year
- TypeLib persistence techniqueβ119Updated 9 months ago
- Section-based payload obfuscation technique for x64β64Updated 11 months ago
- yet another sleep encryption thing. also used the default github repo name for this one.β69Updated 2 years ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure β¦β17Updated 4 months ago
- β100Updated last year
- β41Updated 5 months ago
- Template-based generation of shellcode loadersβ78Updated last year