cocomelonc / meow

Related projects ⓘ

Alternatives and complementary repositories for meow

• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆560Updated last month
• gatariee / gocheck
  Because AV evasion should be easy.
  ☆312Updated 4 months ago
• Faran-17 / Windows-Internals
  Important notes and topics on my journey towards mastering Windows Internals
  ☆339Updated 6 months ago
• kleiton0x00 / Proxy-DLL-Loads
  A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.
  ☆325Updated 5 months ago
• Cracked5pider / LdrLibraryEx
  A small x64 library to load dll's into memory.
  ☆424Updated last year
• CodeXTF2 / maldev-links
  My collection of malware dev links
  ☆244Updated 2 months ago
• Offensive-Panda / ProcessInjectionTechniques
  This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…
  ☆255Updated 2 weeks ago
• Offensive-Panda / RWX_MEMEORY_HUNT_AND_INJECTION_DV
  Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.
  ☆243Updated 5 months ago
• Maldev-Academy / MaldevAcademyLdr.1
  ☆312Updated last year
• itaymigdal / awesome-injection
  Centralized resource for listing and organizing known injection techniques and POCs
  ☆229Updated last week
• eversinc33 / Banshee
  Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.
  ☆493Updated 7 months ago
• rtecCyberSec / Packer_Development
  Slides & Code snippets for a workshop held @ x33fcon 2024
  ☆238Updated 5 months ago
• Maldev-Academy / Christmas
  ☆244Updated 10 months ago
• pard0p / CallstackSpoofingPOC
  C++ self-Injecting dropper based on various EDR evasion techniques.
  ☆338Updated 9 months ago
• Maldev-Academy / HellHall
  Performing Indirect Clean Syscalls
  ☆480Updated last year
• MalwareTech / EDR-Preloader
  An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer
  ☆454Updated 9 months ago
• hasherezade / thread_namecalling
  Process Injection using Thread Name
  ☆241Updated 2 months ago
• OtterHacker / Conferences
  ☆282Updated last week
• Dec0ne / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆433Updated last year
• outflanknl / edr-internals
  Tools for analyzing EDR agents
  ☆208Updated 5 months ago
• VirtualAlllocEx / Direct-Syscalls-vs-Indirect-Syscalls
  The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls
  ☆164Updated 10 months ago
• dobin / avred
  Analyse your malware to surgically obfuscate it
  ☆419Updated last year
• janoglezcampos / llvm-yx-callobfuscator
  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.
  ☆260Updated 10 months ago
• ElliotKillick / LdrLockLiberator
  For when DLLMain is the only way
  ☆352Updated 3 weeks ago
• S3cur3Th1sSh1t / Caro-Kann
  Encrypted shellcode Injection to avoid Kernel triggered memory scans
  ☆344Updated last year
• kymb0 / Malware_learns
  ☆123Updated last year
• trickster0 / TartarusGate
  TartarusGate, Bypassing EDRs
  ☆533Updated 2 years ago
• klezVirus / DriverJack
  Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths
  ☆304Updated 3 months ago
• oldboy21 / RflDllOb
  Reflective DLL Injection Made Bella
  ☆200Updated last month