ctxis / DLLHSC

Related projects ⓘ

Alternatives and complementary repositories for DLLHSC

• boku7 / injectEtwBypass
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆277Updated 3 years ago
• lawiet47 / STFUEDR
  Silence EDRs by removing kernel callbacks
  ☆223Updated 3 years ago
• waldo-irc / LockdExeDemo
  A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/
  ☆184Updated 3 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆100Updated 2 years ago
• marpie / signed-loaders
  signed-loaders documents Windows executables that can be used for side-loading DLLs.
  ☆67Updated 5 years ago
• SolomonSklash / SyscallPOC
  Shellcode injection POC using syscalls.
  ☆117Updated 4 years ago
• antonioCoco / MalSeclogon
  A little tool to play with the Seclogon service
  ☆305Updated 2 years ago
• csandker / inMemoryShellcode
  A Collection of In-Memory Shellcode Execution Techniques for Windows
  ☆145Updated 5 years ago
• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆96Updated 2 years ago
• mdsecactivebreach / ParallelSyscalls
  ☆160Updated 2 years ago
• Cobalt-Strike / CallStackMasker
  A PoC implementation for dynamically masking call stacks with timers.
  ☆252Updated last year
• waldo-irc / YouMayPasser
  You shall pass
  ☆249Updated 2 years ago
• ChaitanyaHaritash / Callback_Shellcode_Injection
  POCs for Shellcode Injection via Callbacks
  ☆393Updated 3 years ago
• Signal-Labs / NtdllUnpatcher
  Example code for EDR bypassing
  ☆146Updated 5 years ago
• NVISOsecurity / CobaltWhispers
  CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…
  ☆227Updated last year
• dtmsecurity / bof_helper
  Beacon Object File (BOF) Creation Helper
  ☆221Updated 2 years ago
• mgeeky / UnhookMe
  UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …
  ☆341Updated 2 years ago
• Hagrid29 / DuplicateDump
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆199Updated 2 years ago
• scrt / avdebugger
  ☆82Updated 2 years ago
• oXis / GPUSleep
  Move CS beacon to GPU memory when sleeping
  ☆236Updated 3 years ago
• rsmudge / unhook-bof
  Remove API hooks from a Beacon process.
  ☆262Updated 3 years ago
• Kudaes / Dumpy
  Reuse open handles to dynamically dump LSASS.
  ☆234Updated 7 months ago
• Yaxser / COFFLoader2
  Load and execute COFF files and Cobalt Strike BOFs in-memory
  ☆204Updated 2 years ago
• zcgonvh / TaskSchedulerMisc
  Misc TaskScheduler Plays
  ☆224Updated 2 years ago
• M01N-Team / HeaderLessPE
  ☆238Updated last year
• hackerhouse-opensource / ColorDataProxyUACBypass
  Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…
  ☆135Updated 2 years ago
• ly4k / CallbackHell
  Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)
  ☆462Updated 3 years ago