florylsk / NtDump

Related projects ⓘ

Alternatives and complementary repositories for NtDump

• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆41Updated last year
• wolfcod / beacondbg
  Beacon Debugger
  ☆30Updated last week
• MrAle98 / BOF-RunPE
  ☆51Updated last year
• matthieu-hackwitharts / UnhookMe
  Cobaltstrike BOF to unhook any Nt api
  ☆14Updated last year
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆30Updated 3 years ago
• eladshamir / SharpElevator
  SharpElevator is a C# implementation of Elevator for UAC bypass. This UAC bypass was originally discovered by James Forshaw and publishe…
  ☆49Updated 2 years ago
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆39Updated 10 months ago
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆41Updated 2 years ago
• c3r3br4t3 / ShadowRDP
  ☆61Updated 9 months ago
• CICADA8-Research / TypeLibWalker
  TypeLib persistence technique
  ☆68Updated 2 weeks ago
• JetP1ane / Artemis
  Artemis - C++ Hell's Gate Syscall Implementation
  ☆30Updated last year
• sliverarmory / injectEtwBypass
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆30Updated 2 years ago
• outflanknl / linux_bof_template
  ELF Beacon Object File (BOF) Template
  ☆32Updated 2 months ago
• Cobalt-Strike / obfuscator-llvm
  ☆37Updated 9 months ago
• seahop / titan
  Titan: A generic user defined reflective DLL for Cobalt Strike
  ☆70Updated last year
• Cobalt-Strike / callback_examples
  This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions
  ☆28Updated 3 months ago
• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆44Updated 3 years ago
• Mav3rick33 / ZenLdr
  Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature
  ☆94Updated last year
• dis0rder0x00 / ParentProcessManipulation-LNK
  Using LNK files and user input simulation to start processes under explorer.exe
  ☆23Updated last month
• NioZow / bof-collection
  ☆20Updated 2 months ago
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆30Updated 2 years ago
• Wra7h / PEResourceInject
  ☆53Updated 2 years ago
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆53Updated 2 weeks ago
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆36Updated 9 months ago
• parzel / GoSleepyCrypt
  In-memory sleep encryption and heap encryption for Go applications through a shellcode function.
  ☆39Updated 9 months ago
• Secidi0t / Titan
  ☆12Updated last year
• WKL-Sec / StackMask
  A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
  ☆55Updated last year