evilashz / PigSyscall
An implementation of an indirect system call
☆126Updated last year
Alternatives and similar repositories for PigSyscall:
Users that are interested in PigSyscall are comparing it to the libraries listed below
- shellcode生成框架☆85Updated 9 months ago
- Beacon compiled using clang☆66Updated 2 years ago
- It stinks☆102Updated 3 years ago
- vehsyscall:a syscall project that may bypass EDR☆56Updated last year
- ☆47Updated last year
- more conveniently Visual-Studio-BOF-template☆64Updated last year
- Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF☆42Updated 2 years ago
- Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…☆71Updated last year
- frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …☆51Updated 2 years ago
- Evasive loader to bypass static detection☆60Updated last year
- UAC Bypass using UIAccess program QuickAssist☆82Updated 2 months ago
- A Cobalt Strike memory evasion loader for redteamers☆99Updated 2 years ago
- Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.☆47Updated last year
- Self Cleanup in post-ex job☆55Updated 7 months ago
- ☆30Updated last year
- A basic C2 framework written in C☆61Updated 10 months ago
- Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique☆63Updated 2 years ago
- Implementation of Indirect Syscall technique to pop a calc.exe☆102Updated last year
- Windows API Call Obfuscation☆102Updated 2 years ago
- Indirect NT syscalls LSASS dumper.☆44Updated last year
- Load static-compiled PE from remote server.☆61Updated 3 years ago
- Efficient RAT signature locator for bypassing AV/EDR, supporting static scanning and memory scanning.☆40Updated 6 months ago
- Windows Defender VDM lua collections☆47Updated 2 years ago
- ☆26Updated last year
- 32 bit process inject shellcode to 32 bit process and 64 bit process☆32Updated last year
- An easy-to-use and powerful Macro for Stack Spoofing.☆20Updated 3 months ago
- bring your own vulnerable driver☆95Updated last year
- Load shellcode via syscall☆53Updated 3 years ago
- Help red teams find opsec processes during engagements☆38Updated 5 months ago
- ☆15Updated 2 years ago