☆10Apr 26, 2024Updated 2 years ago
Alternatives and similar repositories for LdrLoadDll-Unhooking-x86-x64
Users that are interested in LdrLoadDll-Unhooking-x86-x64 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 自定义函数堆栈，从而绕过ETW检测，这个是完整版。☆14Apr 15, 2024Updated 2 years ago
- Rust 重构的 sRDI☆18Sep 9, 2024Updated 2 years ago
- A Simple PoC☆22May 24, 2024Updated 2 years ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated 2 years ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Some of the presentations, workshops, and labs I gave at public conferences.☆34Oct 24, 2025Updated 11 months ago
- 内网渗透、工具开发、二进制等相关笔记☆12Mar 26, 2023Updated 3 years ago
- Research on a new PoC for a Windows Sandbox .wsb HostFolder UNC path primitive that causes the host to authenticate over SMB and leak Net…☆32Jun 21, 2026Updated 4 months ago
- A runtime for developing large-scale and complex PIC module.☆21Sep 15, 2026Updated last month
- Dockerized template to build CS BOFs using clang-cl☆26Jan 29, 2026Updated 8 months ago
- Beacon Debugger☆56Oct 28, 2024Updated last year
- bof for interacting with WSL☆14Jan 8, 2026Updated 9 months ago
- A wrapper around Windows, calls explicitly the lowest possible calls☆14Jan 19, 2023Updated 3 years ago
- Proof-of-concept C2 framework abusing GitLab self-hosted runners as implants — Vue 3 operator UI, NGINX proxy, full file transfer and det…☆36Jun 28, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 重构Beacon☆165Aug 19, 2024Updated 2 years ago
- 看雪 LLVM与代码混淆技术 笔记☆22Aug 31, 2023Updated 3 years ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 4 months ago
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆184Aug 3, 2024Updated 2 years ago
- ☆11Aug 8, 2022Updated 4 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆163Oct 27, 2024Updated last year
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆68Jul 12, 2026Updated 3 months ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆40Apr 6, 2026Updated 6 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Coffee is a loader for ELF (Executable and Linkable Format) object files written in Rust. Coffee是一个用Rust语言编写的ELF object文件的加载器☆62Apr 29, 2024Updated 2 years ago
- 重构Beacon☆15Aug 25, 2024Updated 2 years ago
- Tomcat-内存马-Webshell☆10Feb 23, 2021Updated 5 years ago
- ShellCode 解释器 (样例)，无可执行权限加载 ShellCode (点点 Star，非常感谢!)☆30Mar 7, 2025Updated last year
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 2 months ago
- PE to shellcode☆28Jan 1, 2025Updated last year
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆67Mar 19, 2024Updated 2 years ago
- 使用Visral Studio开发ShellCode☆241Oct 11, 2023Updated 3 years ago
- A sleepmask based on Ekko that preserves unwind data at sleep time.☆57Mar 30, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- hey！这里用来存放公众号中使用的代码☆10Jun 21, 2024Updated 2 years ago
- Hide processes, files, services in Windows ring3☆34Jun 4, 2024Updated 2 years ago
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆102Jan 2, 2026Updated 9 months ago
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- ☆127Sep 1, 2024Updated 2 years ago
- 主要介绍在 GO 语言中使用 QT5 的一些基本用法。☆20Aug 7, 2023Updated 3 years ago