An implementation of an indirect system call
☆133Aug 25, 2023Updated 3 years ago
Alternatives and similar repositories for PigSyscall
Users that are interested in PigSyscall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆734Jul 19, 2023Updated 3 years ago
- more conveniently Visual-Studio-BOF-template☆77Sep 12, 2023Updated 3 years ago
- beta☆119Sep 24, 2024Updated 2 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆79Jul 23, 2023Updated 3 years ago
- Process injection alternative☆404Sep 6, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆124Feb 13, 2023Updated 3 years ago
- A little tool to play with Windows security☆12Jan 21, 2026Updated 9 months ago
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆68May 2, 2023Updated 3 years ago
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- .NET assembly loader with patchless AMSI and ETW bypass☆392Apr 19, 2023Updated 3 years ago
- Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven☆274Oct 16, 2024Updated 2 years ago
- A PoC implementation for dynamically masking call stacks with timers.☆316Feb 13, 2023Updated 3 years ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆236Jul 25, 2023Updated 3 years ago
- Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE☆205Aug 25, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Take a screenshot without injection for Cobalt Strike☆203Jun 7, 2023Updated 3 years ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆307Jun 12, 2026Updated 4 months ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆159Nov 7, 2023Updated 2 years ago
- Self Cleanup in post-ex job☆59Sep 10, 2024Updated 2 years ago
- ☆45Jun 25, 2024Updated 2 years ago
- A BOF that runs unmanaged PEs inline☆703Oct 23, 2024Updated 2 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆143Nov 30, 2022Updated 3 years ago
- 添加计划任务方法集合☆313Aug 6, 2023Updated 3 years ago
- CobaltStrike beacon written in golang☆453Oct 13, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A beacon object file implementation of PoolParty Process Injection Technique.☆461Dec 21, 2023Updated 2 years ago
- Bypass LSA protection using the BYODLL technique☆181Sep 21, 2024Updated 2 years ago
- C++ self-Injecting dropper based on various EDR evasion techniques.☆446Feb 11, 2024Updated 2 years ago
- Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms☆138Dec 20, 2022Updated 3 years ago
- Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI☆35Mar 17, 2023Updated 3 years ago
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆557Feb 13, 2024Updated 2 years ago
- Dumping LSASS with a duplicated handle from custom LSA plugin☆207Feb 23, 2022Updated 4 years ago
- A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk☆475Jul 6, 2024Updated 2 years ago
- BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs☆185Oct 3, 2021Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆85Nov 1, 2023Updated 2 years ago
- Delete file regardless of whether the handle is used via SetFileInformationByHandle☆53Jul 1, 2023Updated 3 years ago
- Threadless Process Injection through entry point hijacking☆353Sep 10, 2024Updated 2 years ago
- The code is a pingback to the Dark Vortex blog: https://0xdarkvortex.dev/hiding-memory-allocations-from-mdatp-etwti-stack-tracing/☆219Jan 29, 2023Updated 3 years ago
- 关于RPC一些绕EDR的tips☆200Mar 3, 2023Updated 3 years ago
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆639Jun 25, 2024Updated 2 years ago
- Generic PE loader for fast prototyping evasion techniques☆247Jul 2, 2024Updated 2 years ago