d35ha / PE2Shellcode

Related projects ⓘ

Alternatives and complementary repositories for PE2Shellcode

• MahmoudZohdy / APICallProxy
  Windows API Call Obfuscation
  ☆86Updated last year
• BeneficialCode / KPPL
  Kill Protected Process Light Process (include av)
  ☆54Updated last year
• aaaddress1 / wowInjector
  PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)
  ☆160Updated 3 years ago
• HadesW / HttpRAT
  HTTPS GET RAT and Memory Loader
  ☆25Updated 2 years ago
• UserExistsError / DllLoaderShellcode
  Shellcode to load an appended Dll
  ☆89Updated 4 years ago
• timwhitez / Doge-sRDI
  Shellcode implementation of Reflective DLL Injection by Golang. Convert DLLs to position independent shellcode
  ☆58Updated 3 years ago
• aaaddress1 / wowGrail
  PoC: Rebuild A New Path Back to the Heaven's Gate (HITB 2021)
  ☆101Updated 3 years ago
• AzAgarampur / byeintegrity2-uac
  Bypass UAC by abusing the Internet Explorer Add-on installer
  ☆50Updated 3 years ago
• killvxk / awesome_shell_loaders
  shellcode-loaders and beacon-loaders
  ☆63Updated last year
• aaaddress1 / SignThief
  Windows PE Signature Thief in C++
  ☆50Updated 4 years ago
• aplyc1a / PEMemoryLoader
  Load static-compiled PE from remote server.
  ☆58Updated 2 years ago
• elddy / Windows-NTAPI-Injector
  Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses
  ☆40Updated 3 years ago
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆38Updated 3 years ago
• aaaddress1 / sakeInject
  Windows PE - TLS (Thread Local Storage) Injector in C/C++
  ☆103Updated 3 years ago
• idiotc4t / Mapping-injection
  NO WriteProcessMemory CreateRemoteThread APIs call shellcode injection
  ☆28Updated 4 years ago
• bopin2020 / WindowsCamp
  Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&
  ☆51Updated 2 months ago
• w1u0u1 / kt
  Kernel file/process/object tool
  ☆64Updated 3 years ago
• mdsecactivebreach / com_inject
  ☆182Updated 2 years ago
• HadesW / power-kill
  power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes
  ☆46Updated 3 years ago
• EddieIvan01 / win32api-practice
  Offensive tools written for practice purposes
  ☆148Updated 2 years ago
• hoangprod / DanSpecial
  Weaponizing Gigabyte driver for priv escalation and bypass PPL
  ☆68Updated 5 years ago
• EgeBalci / Hook_API
  Assembly block for hooking windows API functions.
  ☆81Updated 5 years ago
• idiotc4t / ObfuscationStrings-new
  ☆30Updated 4 years ago
• y11en / PEBFake
  PEBFake(修改PEB 伪装当前进程路径、参数等)
  ☆49Updated 3 years ago
• huoji120 / DuckSandboxDetect
  沙箱测试,测评国内常见沙箱的代码与结论
  ☆98Updated 3 years ago
• uvbs / NT-APC-Injector
  APC DLL Injector with NtQueueApcThread and wake up thread support
  ☆44Updated 7 years ago
• elastic / PPLGuard
  ☆67Updated last year
• oXis / DoublePulsarPayload
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆29Updated 3 years ago
• sisoma2 / ShellcodeLoader
  Small tool to load shellcodes or PEs to analyze them
  ☆80Updated 6 years ago