Playing with PE's and Building Structures by Hand
☆22Apr 21, 2022Updated 4 years ago
Alternatives and similar repositories for HookDetector
Users that are interested in HookDetector are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PoC for detecting and evading ETW detection of .Net Assembly.Load☆22Aug 26, 2020Updated 6 years ago
- C code to enable ETW tracing for Dotnet Assemblies☆31Aug 12, 2022Updated 4 years ago
- Use GZip to compress your .NET assemblies for loading with AssemblyResolve.☆20Apr 11, 2014Updated 12 years ago
- Small handy tool for crafting shellcodes by hand.☆18Apr 20, 2022Updated 4 years ago
- Asynchronous named pipe module for PowerShell☆21May 30, 2016Updated 10 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A simple BOF implementation of klist using Windows API☆32Jul 7, 2022Updated 4 years ago
- Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD☆28Jan 4, 2024Updated 2 years ago
- ☆61Feb 10, 2022Updated 4 years ago
- Unchain AMSI by patching the provider’s unmonitored memory space☆88Nov 24, 2022Updated 3 years ago
- Example of using Sleep to create better named pipes.☆40Jul 25, 2023Updated 3 years ago
- A simple PE loader.☆27Dec 9, 2022Updated 3 years ago
- Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.☆125Apr 9, 2022Updated 4 years ago
- It's what all the kids are talking about☆11Apr 25, 2023Updated 3 years ago
- DLL Hijack Search Order Enumeration BOF☆146Nov 3, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A Poc on blocking Procmon from monitoring network events☆111Aug 7, 2025Updated last year
- DLL Exports Extraction BOF with optional NTFS transactions.☆93Nov 5, 2021Updated 4 years ago
- Swift code to run a dylib on disk☆16May 9, 2022Updated 4 years ago
- Search files for extensions as well as text within.☆122Sep 28, 2021Updated 5 years ago
- A collection of sample code used in some experiments with Sliver C2☆17Mar 28, 2023Updated 3 years ago
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆374May 24, 2022Updated 4 years ago
- various methods of making API calls☆19Feb 1, 2025Updated last year
- miscellaneous sploit scripts/hacks☆17Feb 3, 2025Updated last year
- ☆72Apr 21, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆57Apr 19, 2023Updated 3 years ago
- Create file system symbolic links from low privileged user accounts within PowerShell☆97Jun 20, 2022Updated 4 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 2 years ago
- NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs☆97Apr 4, 2026Updated 6 months ago
- DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)☆65Nov 13, 2022Updated 3 years ago
- Hides processes from the windows task manager using IAT hooking.☆22Mar 30, 2021Updated 5 years ago
- Files for http://deniable.org/windows/windows-callbacks☆26Jul 9, 2020Updated 6 years ago
- It stinks☆100Apr 22, 2022Updated 4 years ago
- C# implementation of the token privilege removal flaw discovered by @GabrielLandau/Elastic☆144Feb 23, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- UUID based Shellcode loader for your favorite C2☆86Dec 8, 2021Updated 4 years ago
- A simple COM server which provides a component to run shellcode☆143May 12, 2020Updated 6 years ago
- ☆28Aug 8, 2021Updated 5 years ago
- A simple program to hook the current process to identify the manual syscall executions on windows☆264Nov 18, 2022Updated 3 years ago
- Beacon Object File to locate and suspend the threads hosting the Event Log service☆29Jun 17, 2022Updated 4 years ago
- A Cobalt Strike Beacon Object File (BOF) project which uses direct system calls to enumerate processes for specific loaded modules or pro…☆273May 3, 2023Updated 3 years ago
- In-memory token vault BOF for Cobalt Strike☆152Aug 18, 2022Updated 4 years ago