Malware development: persistence - part 1: startup folder registry keys. C++ implementation
☆13Apr 21, 2022Updated 4 years ago
Alternatives and similar repositories for 2022-04-20-malware-pers-1
Users that are interested in 2022-04-20-malware-pers-1 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Classic DLL injection. Download dll from url and inject. Simple C++ implementation☆11Apr 16, 2022Updated 4 years ago
- Malware persistence via COM DLL hijacking. C++ implementation example☆15May 2, 2022Updated 4 years ago
- Process injection via KernelCallbackTable☆13Jan 28, 2022Updated 4 years ago
- Run shellcode via EnumDesktopsA. C++ implementation☆13Jun 27, 2022Updated 4 years ago
- Code injection via ZwCreateSection, ZwUnmapViewOfSection. C++ example☆18Jan 17, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Find kernel32 base and API addresses. Simple C++ implementation☆24Apr 7, 2022Updated 4 years ago
- Malware dev tricks. Syscalls part 1. Simple C example☆11Jun 8, 2023Updated 3 years ago
- Malware AV evasion via disable Windows Defender (Registry). C++☆35Jun 5, 2022Updated 4 years ago
- Run payload like a Lazarus Group (UuidFromStringA). C++ implementation☆22Jul 24, 2022Updated 4 years ago
- POC for scanning ProxyShell(CVE-2021-34523,CVE-2021-34473,CVE-2021-31207)☆16Oct 6, 2021Updated 4 years ago
- FjoSpidie Honey Client☆17Aug 1, 2015Updated 11 years ago
- PoC for CVE-2021-3129 (Laravel)☆12Oct 9, 2021Updated 4 years ago
- Thawne is a Sentinel for your Program. A trojan that Reinfects systems. It installs itself on the system it's Executed on. After which Th…☆10Oct 13, 2020Updated 5 years ago
- Remote Administration Tool For Windows VB.NET☆12Mar 19, 2019Updated 7 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Scans a list of raccoon servers from Tria.ge and extracts the config☆15Jun 5, 2023Updated 3 years ago
- Phantom DLL Hollowing method implemented in modmap☆17Jun 9, 2021Updated 5 years ago
- Runpe + DInvoke + Syscall☆17Jun 18, 2021Updated 5 years ago
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆13May 20, 2023Updated 3 years ago
- Headers for linking your software with ntdll.dll☆15Nov 4, 2020Updated 5 years ago
- Decoder for VMProtect hwids☆20Aug 1, 2022Updated 4 years ago
- This repo contains C/C++ snippets that can be handy in specific offensive scenarios.☆13May 31, 2024Updated 2 years ago
- ☆16Sep 23, 2021Updated 4 years ago
- Remote Administration Tool, Server Written in C# and Client Written in C++☆15Dec 8, 2022Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Yet, Another Packer/Loader☆25Feb 26, 2023Updated 3 years ago
- OFFZONE 2024 Malware Persistence workshop☆23Dec 18, 2024Updated last year
- Debugger checks in 3 ways☆20Jan 25, 2018Updated 8 years ago
- KoiVM,EazVM,AgileVM Patcher Por "Team Venturi77"☆18Aug 16, 2019Updated 7 years ago
- PoC for generating an APPWIZ.cpl module designed to be loaded by Fondue.exe LOLBin☆16Jan 2, 2026Updated 8 months ago
- This is a tutorial and introduction to Reflective DLL Injection + reading outputs of injected dll using named pipes.☆20Feb 8, 2025Updated last year
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆102Sep 3, 2026Updated 2 weeks ago
- WORK IN PROGRESS. RAT written in C++ using Win32 API☆20Sep 12, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Public scripts etc.☆19Jan 14, 2024Updated 2 years ago
- inspired by mr d0x filefix☆16Feb 4, 2026Updated 7 months ago
- AADInternals Authenticator Android App☆12Jul 2, 2020Updated 6 years ago
- Overwrites the whole PE Header☆19Apr 20, 2020Updated 6 years ago
- Vulnerabilities exploitation examples, python☆25May 22, 2023Updated 3 years ago
- This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for loc…☆55May 8, 2023Updated 3 years ago
- Invoke-Decoder – A PowerShell script to decode/deobfuscate malware samples☆18Aug 2, 2020Updated 6 years ago