eversinc33 / GpuDecryptShellcodeLinks
XOR decrypting shellcode using the GPU with OpenCL.
☆116Updated 3 months ago
Alternatives and similar repositories for GpuDecryptShellcode
Users that are interested in GpuDecryptShellcode are comparing it to the libraries listed below
Sorting:
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆64Updated 2 years ago
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆45Updated last year
- LKM rootkit for modern kernels, with DNS C2 and a simple web interface☆74Updated 2 months ago
- bring your own vulnerable driver☆110Updated 2 years ago
- An Obfuscator-LLVM based mingw-w64 toolchain.☆42Updated 3 years ago
- ☆50Updated 3 years ago
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆86Updated 2 years ago
- ☆38Updated 2 years ago
- Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar☆131Updated last year
- ☆87Updated 2 years ago
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆105Updated 3 years ago
- Template-based generation of shellcode loaders☆79Updated last year
- Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html☆135Updated 3 years ago
- Kernel Mode Driver for Elevating Process Privileges☆132Updated 2 years ago
- Exploitation of echo_driver.sys☆169Updated 2 years ago
- Enabled / Disable LSA Protection via BYOVD☆77Updated 3 years ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆124Updated 2 years ago
- LdrLoadDll Unhooking☆130Updated 3 years ago
- A COFF Loader written in Rust☆122Updated this week
- Small PoC of using a Microsoft signed executable as a lolbin.☆138Updated 2 years ago
- ☆100Updated last year
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆62Updated 3 months ago
- This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.☆182Updated this week
- I have documented all of the AMSI patches that I learned till now☆73Updated 5 months ago
- Exploiting the KsecDD Windows driver through Server Silos☆73Updated 10 months ago
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆121Updated 2 years ago
- BYOVD Technique Example using viragt64 driver☆53Updated last year
- A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering t…☆99Updated 8 months ago
- find dll base addresses without PEB WALK☆144Updated 2 months ago
- In-memory hiding technique☆57Updated 8 months ago