evilashz / PigSyscallLinks
An implementation of an indirect system call
☆129Updated last year
Alternatives and similar repositories for PigSyscall
Users that are interested in PigSyscall are comparing it to the libraries listed below
Sorting:
- shellcode生成框架☆87Updated 11 months ago
- Beacon compiled using clang☆69Updated 2 years ago
- It stinks☆102Updated 3 years ago
- Evasive loader to bypass static detection☆58Updated last year
- A method to execute syscalls while bypassing EDR's function hooking and call stack analysis.☆14Updated 2 months ago
- more conveniently Visual-Studio-BOF-template☆65Updated last year
- Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…☆72Updated last year
- vehsyscall:a syscall project that may bypass EDR☆58Updated last year
- Simulate per-process disconnection in red team environments☆43Updated 2 weeks ago
- ☆47Updated last year
- Windows Defender VDM lua collections☆47Updated 2 years ago
- Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.☆47Updated last year
- ☆31Updated last year
- A basic C2 framework written in C☆60Updated 11 months ago
- Self Cleanup in post-ex job☆56Updated 9 months ago
- Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique☆67Updated 2 years ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆56Updated this week
- ☆15Updated 2 years ago
- Silently Install Chrome Extension For Persistence☆73Updated 11 months ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆53Updated last year
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆54Updated 3 weeks ago
- Load static-compiled PE from remote server.☆62Updated 3 years ago
- Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI☆35Updated 2 years ago
- A Simple PoC☆21Updated last year
- Beacon Object File (BOF) Template☆51Updated 7 months ago
- Load shellcode via syscall☆54Updated 3 years ago
- bring your own vulnerable driver☆98Updated 2 years ago
- Indirect NT syscalls LSASS dumper.☆45Updated last year
- power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes☆46Updated 3 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆138Updated 2 years ago