☆10Apr 26, 2024Updated 2 years ago
Alternatives and similar repositories for LdrLoadDll-Unhooking-x86-x64
Users that are interested in LdrLoadDll-Unhooking-x86-x64 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 自定义函数堆栈，从而绕过ETW检测，这个是完整版。☆14Apr 15, 2024Updated 2 years ago
- Rust 重构的 sRDI☆18Sep 9, 2024Updated 2 years ago
- A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …☆14Oct 21, 2024Updated 2 years ago
- A Simple PoC☆22May 24, 2024Updated 2 years ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- 内网渗透、工具开发、二进制等相关笔记☆12Mar 26, 2023Updated 3 years ago
- create schtasks bypass AV☆24Jul 14, 2024Updated 2 years ago
- Dynamic Function Resolution (DFR) definitions for Crystal Palace☆12Dec 19, 2025Updated 10 months ago
- Some of the presentations, workshops, and labs I gave at public conferences.☆34Oct 24, 2025Updated last year
- A runtime for developing large-scale and complex PIC module.☆21Sep 15, 2026Updated last month
- Dockerized template to build CS BOFs using clang-cl☆25Jan 29, 2026Updated 9 months ago
- A wrapper around Windows, calls explicitly the lowest possible calls☆13Jan 19, 2023Updated 3 years ago
- 使用Visral Studio开发ShellCode☆240Oct 11, 2023Updated 3 years ago
- ☆15Aug 19, 2026Updated 2 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- Beacon Debugger☆56Oct 28, 2024Updated 2 years ago
- 重构Beacon☆165Aug 19, 2024Updated 2 years ago
- 看雪 LLVM与代码混淆技术 笔记☆22Aug 31, 2023Updated 3 years ago
- Reimplement CreateProcessInternalW via Windows 10 20H1+/Windows 11 Base on NtCreateUserProcess-Post☆83Sep 2, 2024Updated 2 years ago
- LdrLoadDll Unhooking☆132Jan 16, 2022Updated 4 years ago
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆185Aug 3, 2024Updated 2 years ago
- ☆11Aug 8, 2022Updated 4 years ago
- bof for interacting with WSL☆14Jan 8, 2026Updated 10 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆42Apr 6, 2026Updated 7 months ago
- 2022hw漏洞消息与poc&exp分享☆17Aug 2, 2022Updated 4 years ago
- 重构Beacon☆15Aug 25, 2024Updated 2 years ago
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆164Oct 27, 2024Updated 2 years ago
- Tomcat-内存马-Webshell☆10Feb 23, 2021Updated 5 years ago
- A basic C2 framework written in C☆61Jul 7, 2024Updated 2 years ago
- EventViewer Bypass Uac Bof☆22Jul 23, 2022Updated 4 years ago
- ShellCode 解释器 (样例)，无可执行权限加载 ShellCode (点点 Star，非常感谢!)☆30Mar 7, 2025Updated last year
- Selective In-Memory Syscall Unhooking, a stealthy method to bypass user-mode hooks in ntdll.dll☆46Mar 11, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Open Source implementation of PsPipeJack☆27May 27, 2026Updated 5 months ago
- A simple BOF (Beacon Object File) to search files in the system☆20Dec 2, 2023Updated 2 years ago
- An application to demonstrate stealing an AI model through knowledge distillation.☆11Dec 1, 2025Updated 11 months ago
- Coffee is a loader for ELF (Executable and Linkable Format) object files written in Rust. Coffee是一个用Rust语言编写的ELF object文件的加载器☆62Apr 29, 2024Updated 2 years ago
- A python port of CCob's ThreadlessInject☆26Mar 18, 2023Updated 3 years ago
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆102Jan 2, 2026Updated 10 months ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆67Mar 19, 2024Updated 2 years ago
Are these results useful?