ctxis / DLLHSCLinks
DLLHSC - DLL Hijack SCanner a tool to assist with the discovery of suitable candidates for DLL Hijacking
☆155Updated 5 years ago
Alternatives and similar repositories for DLLHSC
Users that are interested in DLLHSC are comparing it to the libraries listed below
Sorting:
- Silence EDRs by removing kernel callbacks☆239Updated 5 years ago
- CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)☆300Updated 4 years ago
- Stop Windows Defender using the Win32 API☆193Updated 3 years ago
- ☆154Updated 4 years ago
- Process Ghosting Tool☆174Updated 4 years ago
- ☆169Updated 3 years ago
- UnhookMe is an universal Windows API resolver & unhooker addressing problem of invoking unmonitored system calls from within of your Red …☆349Updated 3 years ago
- Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)☆480Updated 4 years ago
- PoC MSVC COFF Object file loader/injector.☆185Updated 4 years ago
- Load static-compiled PE from remote server.☆68Updated 3 years ago
- signed-loaders documents Windows executables that can be used for side-loading DLLs.☆70Updated 6 years ago
- GhostWriting Injection Technique.☆186Updated 7 years ago
- Move CS beacon to GPU memory when sleeping☆250Updated 4 years ago
- An implementation and proof-of-concept of Process Forking.☆230Updated 4 years ago
- Shellcode injection POC using syscalls.☆117Updated 5 years ago
- Building and Executing Position Independent Shellcode from Object Files in Memory☆165Updated 4 years ago
- ☆74Updated 4 years ago
- Convert shellcode generated using pe_2_shellcode to cdb format.☆101Updated 3 years ago
- A demo of the relevant blog post: https://www.arashparsa.com/hook-heaps-and-live-free/☆193Updated 4 years ago
- Bypass UAC by abusing the Internet Explorer Add-on installer☆55Updated 4 years ago
- ☆103Updated 3 years ago
- Minimal PoC developed as discuss in https://captmeelo.com/redteam/maldev/2022/05/10/ntcreateuserprocess.html☆143Updated 3 years ago
- Some source code to demonstrate avoiding certain direct syscall detections by locating and JMPing to a legitimate syscall instruction wit…☆217Updated 2 years ago
- It stinks☆103Updated 3 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆106Updated 4 years ago
- Load and execute COFF files and Cobalt Strike BOFs in-memory☆226Updated 3 years ago
- ☆244Updated 2 years ago
- ☆133Updated 3 years ago
- Exploitation of echo_driver.sys☆168Updated 2 years ago
- A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (…☆182Updated 2 years ago