fanbyprinciple / bin2shellcodeLinks
.bin file to shellcode convertor
☆39Updated last year
Alternatives and similar repositories for bin2shellcode
Users that are interested in bin2shellcode are comparing it to the libraries listed below
Sorting:
- Tool to bypass LSA Protection (aka Protected Process Light)☆63Updated 11 months ago
- ☆109Updated 10 months ago
- Identify common EDR processes, directories, and services. Simple BOF of Invoke-EDRChecker.☆126Updated last year
- Modified versions of the Cobalt Strike Process Injection Kit☆103Updated last year
- Terminate AV/EDR leveraging BYOVD attack☆102Updated 9 months ago
- A C# port from Invoke-GhostTask☆119Updated last year
- Lateral Movement☆125Updated 2 years ago
- A Mythic agent for Windows written in C☆142Updated this week
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 7 months ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆118Updated 5 months ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆156Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated 2 years ago
- Good CLR Host with Native patchless AMSI Bypass☆97Updated 8 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆88Updated 9 months ago
- Collection of BOFs created for red team/adversary engagements. Created to be small and interchangeable, for quick recon or eventing.☆174Updated last week
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆89Updated 7 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆98Updated last week
- ☆198Updated 9 months ago
- ☆92Updated last year
- C# havoc implant☆101Updated 2 years ago
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆85Updated 2 years ago
- Dump processes over WMI with MSFT_MTProcess☆81Updated 3 months ago
- Extract SAM and SYSTEM using Volume Shadow Copy (VSS) API. With multiple exfiltration options and XOR obfuscation☆231Updated this week
- Abuse leaked token handles.☆134Updated 2 years ago
- ☆85Updated 7 months ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆99Updated 8 months ago
- ☆121Updated 11 months ago
- Execute commands in other Sessions☆91Updated last year
- .NET Post-Exploitation Utility for Abusing Strong Explicit Certificate Mappings in ADCS☆150Updated 10 months ago
- Automatically scan the file system to identify Electron applications vulnerable to ASAR tampering.☆141Updated last month