Execute shellcode via Bluetooth device authentication
☆43Feb 19, 2025Updated last year
Alternatives and similar repositories for btexec
Users that are interested in btexec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆49Jan 25, 2025Updated last year
- BasicLDR: A Reflective DLL Loader☆14Jun 11, 2024Updated 2 years ago
- Shellcode loader that executes embedded Lua from Rust.☆125Dec 16, 2024Updated last year
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- A short scraper looking for a POC of CVE-2024-49112☆14Dec 16, 2024Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆19Dec 18, 2024Updated last year
- Proof of concept to detect module stomping detection by looking for modified .pdata sections.☆41Jun 11, 2026Updated 4 months ago
- Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability☆24Feb 5, 2025Updated last year
- Linux CS bypass technique☆34Feb 4, 2025Updated last year
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Terms of Use Conditional Access M365 Evilginx Phishlet☆47Jun 23, 2025Updated last year
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 3 months ago
- ☆22Jun 24, 2025Updated last year
- A workshop about core UDRL mechanics by Joris Ignoul & Mickey De Baets☆23Jun 12, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆16Jul 30, 2026Updated 3 months ago
- Convert Microsoft Defender Antivirus Signatures (VDM) into a SQL DB☆26Jun 27, 2025Updated last year
- A BOF to enumerate system process, their protection levels, and more.☆125Nov 27, 2024Updated last year
- remote process injections using pool party techniques☆72Jun 29, 2025Updated last year
- A few BOF files to help facilitate reading and writing bytes to DLL function calls.☆12Jun 16, 2025Updated last year
- use python on windows with full submodule support without installation☆30Jan 23, 2025Updated last year
- A robust Windows Process Executable Packer and Launcher implementation written in Rust for Windows x64 systems.☆54Jan 9, 2025Updated last year
- BOF with Synthetic Stackframe☆276Oct 30, 2025Updated last year
- Windows rootkit designed to work with BYOVD exploits☆227Jan 18, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- COM ViewLogger — new malware keylogging technique☆412Jan 6, 2025Updated last year
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- ☆60Oct 24, 2024Updated 2 years ago
- Passive backdoor implant that sniffs for a covert magic-packet trigger and runs tasks written in a custom 23-opcode bytecode command lang…☆57Aug 26, 2026Updated 2 months ago
- Evasion kit for Cobalt Strike☆18Oct 31, 2026Updated last week
- Project Sato - C2☆10Apr 24, 2025Updated last year
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆168Mar 26, 2025Updated last year
- Reaping treasures from strings in remote processes memory☆287Feb 8, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆40Mar 6, 2025Updated last year
- ☆16Jan 15, 2026Updated 9 months ago
- "Service-less" driver loading☆192Nov 28, 2024Updated last year
- load shellcode without P/D Invoke and VirtualProtect call.☆170Sep 2, 2025Updated last year
- TypeLib persistence technique☆151Oct 22, 2024Updated 2 years ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆316Sep 18, 2024Updated 2 years ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Jul 9, 2023Updated 3 years ago