DLL Unlinking from InLoadOrderModuleList, InMemoryOrderModuleList, InInitializationOrderModuleList, and LdrpHashTable
☆66Apr 4, 2026Updated 7 months ago
Alternatives and similar repositories for UnlinkDLL
Users that are interested in UnlinkDLL are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆211Nov 28, 2023Updated 2 years ago
- Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.☆57Feb 29, 2024Updated 2 years ago
- Nim version of MDSec's Parallel Syscall PoC☆124Apr 4, 2026Updated 7 months ago
- Execute shellcode files with rundll32☆230Jan 28, 2024Updated 2 years ago
- Identify binaries with Authenticode digital signatures signed to an internal CA/domain☆41Feb 6, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Userland API Unhooker Project☆110Apr 4, 2026Updated 7 months ago
- Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)☆266Jun 29, 2024Updated 2 years ago
- A PoC project for embedding shellcode to Hint/Name Table☆113Apr 4, 2026Updated 7 months ago
- NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs☆97Apr 4, 2026Updated 7 months ago
- Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process☆292Jan 21, 2024Updated 2 years ago
- Purple Team Dropper generator using open source templates.☆18May 23, 2024Updated 2 years ago
- PoC demonstrating a multi process injection chain aimed at remotely executing shellcode☆257Jan 21, 2024Updated 2 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆298Jul 15, 2023Updated 3 years ago
- Remote Shellcode Injector☆218Aug 27, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆38May 20, 2023Updated 3 years ago
- Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…☆189Aug 2, 2023Updated 3 years ago
- COFF and BOF Loader written in Nim☆178Apr 4, 2026Updated 7 months ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Oct 31, 2023Updated 3 years ago
- ☆60Dec 15, 2023Updated 2 years ago
- Linux Sleep Obfuscation☆129Jan 7, 2024Updated 2 years ago
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆13May 20, 2023Updated 3 years ago
- An App Domain Manager Injection DLL PoC on steroids☆242Dec 14, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- yet another AV killer tool using BYOVD☆317Dec 12, 2023Updated 2 years ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Feb 11, 2024Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Nov 1, 2023Updated 3 years ago
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆195Mar 4, 2024Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Dec 16, 2023Updated 2 years ago
- C# version of MDSec's ParallelSyscalls☆143Jan 9, 2022Updated 4 years ago
- ☆163Dec 30, 2022Updated 3 years ago
- Exploitation of echo_driver.sys☆170Sep 16, 2023Updated 3 years ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆411Jan 11, 2026Updated 9 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A C port of b33f's UrbanBishop☆38Oct 1, 2020Updated 6 years ago
- A care package of useful bofs for red team engagments☆53Dec 6, 2024Updated last year
- UUID based Shellcode loader for your favorite C2☆86Dec 8, 2021Updated 4 years ago
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆229Nov 23, 2023Updated 2 years ago
- Halos Gate-based NTAPI Unhooker☆50Apr 21, 2022Updated 4 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- PE obfuscator with Evasion in mind☆211Apr 25, 2023Updated 3 years ago