Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)
☆17Mar 24, 2026Updated 7 months ago
Alternatives and similar repositories for amsi-pageguard-veh
Users that are interested in amsi-pageguard-veh are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Educational PowerShell-based shellcode injection library.☆18Aug 2, 2026Updated 3 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- Bypassing Amsi using LdrLoadDll☆48Jan 8, 2025Updated last year
- Request a service ticket from a foreign DC using an inter-realm TGT, for cross-realm cases Impacket's getST.py mishandles☆10Aug 4, 2026Updated 3 months ago
- CVE 2025 27237 Zabbix LPE proof of concept.☆21Jan 26, 2026Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆56Oct 13, 2025Updated last year
- Local Windows credential extraction☆26Jul 14, 2026Updated 4 months ago
- Aggregate of my offensive (Red), DevOps (Green), and defensive (Blue) knowledge in the form of an Obsidian Vault hosted by an mkdocs-mate…☆10Nov 22, 2024Updated last year
- use python on windows with full submodule support without installation☆30Jan 23, 2025Updated last year
- modified mssqlclient from impacket to extract policies from the SCCM database☆52Feb 24, 2026Updated 8 months ago
- ☆32Jun 1, 2026Updated 5 months ago
- RunPE implementation with multiple evasive techniques (2)☆16Sep 25, 2025Updated last year
- Handle Redirect via BYOVD Kernel Read/Write☆22Sep 13, 2026Updated 2 months ago
- ☆11Aug 5, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆11Feb 12, 2023Updated 3 years ago
- Launches a limited shell using PowerShell Runspaces with an optional AMSI Bypass. Does not invoke Powershell.exe☆13Dec 11, 2023Updated 2 years ago
- Random BOFs for LDAP tradecraft☆75Sep 9, 2025Updated last year
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆48Aug 20, 2026Updated 2 months ago
- Just a nice little shellcode loader using unconventional methods to avoid using signatured APIs☆30Jul 11, 2025Updated last year
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆177May 30, 2024Updated 2 years ago
- Some good things for EXP-301 course☆12Nov 15, 2023Updated 3 years ago
- BOF to manage Active Directory Integrated DNS (ADIDNS)☆28Jul 28, 2025Updated last year
- crystal palace + draugr function hook definition generator☆17Jan 27, 2026Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A tool to play with scheduled tasks on Windows, in Rust☆125Nov 1, 2025Updated last year
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- NimReflectiveLoader is a Nim-based tool for in-memory DLL execution using Reflective DLL Loading.☆32Jan 21, 2024Updated 2 years ago
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- 通过COM调用实现LNK文件结构的快速修改☆11Oct 15, 2025Updated last year
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 11 months ago
- An advanced data pipeline engine for the BloodHound OpenGraph framework☆19Apr 11, 2026Updated 7 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- Offset Independent Credential Extraction Tool☆72Sep 2, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Execute shellcode via ASPNET compiler☆61Oct 2, 2025Updated last year
- Adaptix C2 agent using Crystal Palace PIC linker and PICO module system☆124Jun 7, 2026Updated 5 months ago
- ☆13Apr 23, 2019Updated 7 years ago
- Robust Cobalt Strike shellcode loader with multiple advanced evasion features☆204Apr 21, 2025Updated last year
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆119Jul 14, 2026Updated 4 months ago
- ☆30Aug 11, 2025Updated last year
- Locate dlls and function addresses without PEB Walk and EAT parsing☆111Nov 7, 2025Updated last year
Are these results useful?