florylsk / ExecIT
Execute shellcode files with rundll32
☆190Updated last year
Alternatives and similar repositories for ExecIT:
Users that are interested in ExecIT are comparing it to the libraries listed below
- .NET assembly loader with patchless AMSI and ETW bypass☆313Updated last year
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆208Updated last year
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆224Updated last year
- Generic PE loader for fast prototyping evasion techniques☆213Updated 7 months ago
- ☆180Updated last year
- Port of Cobalt Strike's Process Inject Kit☆165Updated 2 months ago
- Weaponized HellsGate/SigFlip☆198Updated last year
- Patching AmsiOpenSession by forcing an error branching☆143Updated last year
- 「💀」Proof of concept on BYOVD attack☆154Updated 2 months ago
- Terminate AV/EDR Processes using kernel driver☆339Updated last year
- Evasive Golang Loader☆131Updated 6 months ago
- Execute shellcode from a remote-hosted bin file using Winhttp.☆230Updated last year
- A Beacon Object File (BOF) template for Visual Studio☆167Updated 6 months ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆235Updated 8 months ago
- Shaco is a linux agent for havoc☆156Updated last year
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆147Updated last year
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆289Updated 10 months ago
- ☆165Updated last year
- Generate Shellcode Loaders & Injects☆153Updated last year
- Lateral Movement Using DCOM and DLL Hijacking☆283Updated last year
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆157Updated 8 months ago
- ApexLdr is a DLL Payload Loader written in C☆109Updated 7 months ago
- An App Domain Manager Injection DLL PoC on steroids☆164Updated last year
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆180Updated last year
- ☆151Updated last year
- A beacon object file implementation of PoolParty Process Injection Technique.☆367Updated last year
- Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime☆302Updated last year
- Patch AMSI and ETW☆236Updated 9 months ago
- This repository implements Threadless Injection in C☆159Updated last year
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆93Updated 2 years ago