(STILL.. EDR-evading) Password hash dumper for MacOS
☆21Jul 8, 2026Updated 3 months ago
Alternatives and similar repositories for mimic
Users that are interested in mimic are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Position Independent Code (PIC) implementation of the execute-assembly command, using Crysta Palace linker.☆22Oct 4, 2026Updated 2 weeks ago
- Python scripts that helps in the development of PPKG binaries☆14Jul 31, 2026Updated 2 months ago
- A havoc UI python module to help in reporting and vulnerabilities to exploit on an internal network.☆12Oct 31, 2023Updated 2 years ago
- Another new coercion primitive with LPE - machine-account NTLM coercion from a non-admin user via Windows Store InstallService plugin res…☆89Jun 20, 2026Updated 4 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 2 months ago
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated 2 weeks ago
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆26Updated this week
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆66Jun 15, 2026Updated 4 months ago
- Proof of concept to detect module stomping detection by looking for modified .pdata sections.☆41Jun 11, 2026Updated 4 months ago
- Four-kit defense evasion suite for Sliver C2: Crystal Palace loader, sleep masking, in-memory PE execution, and remote process injection …☆103Jul 21, 2026Updated 3 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆76Sep 19, 2026Updated last month
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- Shellcode Loader for Master Thesis☆74Jul 5, 2026Updated 3 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Aether is a Windows memory-forensics and threat hunting tool that scans live process memory for malicious pattern, detect injection techn…☆66Jul 5, 2026Updated 3 months ago
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last week
- Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opport…☆37Oct 1, 2026Updated 3 weeks ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆107Oct 1, 2026Updated 3 weeks ago
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆32Updated this week
- ☆72Jul 12, 2026Updated 3 months ago
- A listener profile for the Mythic C2 framework that utilizes AI vendors file API's☆30Oct 2, 2026Updated 2 weeks ago
- Process ID Mutator via BYOVD Kernel R/W☆20Sep 6, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for …☆52Aug 20, 2026Updated 2 months ago
- Demonstration of the DLL party process injection technique☆89Oct 1, 2026Updated 2 weeks ago
- Raw NTFS volume oracle: locked-file read and offline SAM hashes without LSASS☆63Jul 22, 2026Updated 2 months ago
- Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.☆246Aug 9, 2026Updated 2 months ago
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- ☆73Sep 29, 2026Updated 3 weeks ago
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆30Sep 23, 2026Updated 3 weeks ago
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆54Oct 13, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- sigreturn-oriented(SROP) based sleep obfuscation poc for Linux☆70Dec 15, 2025Updated 10 months ago
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆66Oct 7, 2026Updated 2 weeks ago
- PhantomFS is a Windows honeypot that projects convincing decoy files — credentials, financials, SSH keys — into a virtual directory via P…☆71Aug 15, 2026Updated 2 months ago
- A litterbox integration for the Mythic Command and Control Server☆21Sep 14, 2026Updated last month
- Evasive loader for .NET Framework assemblies☆84May 12, 2026Updated 5 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆41Sep 20, 2026Updated last month
- Blind AV solutions by setting firewall rules to block outgoing connections☆16Jun 9, 2024Updated 2 years ago