☆56Nov 7, 2024Updated last year
Alternatives and similar repositories for warbird-demos
Users that are interested in warbird-demos are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆36Sep 12, 2024Updated last year
- ⚠️ WIP: LLVM-C Python bindings with nanobind.☆24May 14, 2026Updated 3 months ago
- Reimplementation of Microsoft's Warbird obuscator☆220Jun 24, 2024Updated 2 years ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 4 months ago
- ☆15Jan 15, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Windows capability development using GCC and GNU Make☆23Nov 1, 2025Updated 9 months ago
- An example of how a driver can register a handle creation callback.☆16Jun 12, 2023Updated 3 years ago
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 9 months ago
- Sage is a virtual Mythic agent that that uses an AI agentic system to operate Mythic and Mythic agents running on compromised hosts.☆19Updated this week
- A PowerShell console in C/C++ with all the security features disabled☆396Oct 14, 2025Updated 10 months ago
- load shellcode without P/D Invoke and VirtualProtect call.☆172Sep 2, 2025Updated 11 months ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
- ☆31Apr 2, 2026Updated 4 months ago
- "Service-less" driver loading☆192Nov 28, 2024Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A small experiment on assigning a processes threads a specific CPU and then blocking it with a high priority thread☆33Sep 24, 2025Updated 10 months ago
- ☆31Feb 28, 2025Updated last year
- VDM sig bypass and additional WinAPI stubs☆19Feb 16, 2026Updated 5 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆80Dec 23, 2023Updated 2 years ago
- A cross-platform C++ framework for building Windows shellcode☆177Apr 21, 2026Updated 3 months ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated 11 months ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆141Aug 31, 2025Updated 11 months ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆83Jul 5, 2026Updated last month
- GPOAnalyzer is a tool designed to assist in parsing domain Group Policy Object (GPO) files located in the SYSVOL directory.☆29Jun 14, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆125May 12, 2021Updated 5 years ago
- An example of how to use Microsoft Windows Warbird technology☆96Apr 23, 2023Updated 3 years ago
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 4 months ago
- PrimitiveInjection by using Read, Write and Allocation Primitives.☆54Jun 21, 2025Updated last year
- Hides in your attic... I mean process☆24Apr 29, 2026Updated 3 months ago
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆165Mar 26, 2025Updated last year
- Payload Obfuscation for Red Teams workshop materials☆89Jun 8, 2026Updated 2 months ago
- PoC Implementation of a fully dynamic call stack spoofer☆986Jul 20, 2024Updated 2 years ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆26Jul 15, 2023Updated 3 years ago
- A BOF that runs unmanaged PEs inline☆703Oct 23, 2024Updated last year
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆286Sep 18, 2024Updated last year
- WinDbg plugin to trace module transitions from a debugged driver.☆54Dec 22, 2025Updated 7 months ago
- A PoC UDRL for Cobalt Strike built with Crystal Palace that combines Raphael Mudge's page streaming technique with a modular call gate (D…☆138Jan 21, 2026Updated 6 months ago
- ☆49May 12, 2021Updated 5 years ago
- Zero EAT touch way to retrieve function addresses (GetProcAddress on steroids)☆147Mar 16, 2024Updated 2 years ago