DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing & Section mapping, API hashing & Dynamic resolution, fileless HTTP delivery (AES encrypted option)
☆82Jul 10, 2026Updated 3 months ago
Alternatives and similar repositories for Dynloader
Users that are interested in Dynloader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆72Jul 12, 2026Updated 3 months ago
- P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an executi…☆246Jul 8, 2026Updated 3 months ago
- Reverse engineering analysis of PureRAT, a multi-stage RAT that executes via msbuild.exe and communicates with C2 servers at pure8s.ddnsf…☆16Sep 21, 2026Updated last month
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆71Oct 18, 2026Updated last week
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆104Jul 1, 2026Updated 3 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Windows tool that converts LDIF files to BloodHound CE☆34Dec 20, 2025Updated 10 months ago
- ☆30Jul 24, 2026Updated 3 months ago
- a minimal, position-independent C shellcode framework for Windows x64. compiles entirely on Linux☆70Aug 1, 2026Updated 2 months ago
- A foundational C library for building operationally credible offensive capabilities☆95Sep 21, 2026Updated last month
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆83Sep 18, 2026Updated last month
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- ☆22Jun 28, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Active Directory forensic framework☆16May 18, 2026Updated 5 months ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆153Updated this week
- (STILL.. EDR-evading) Password hash dumper for MacOS☆21Jul 8, 2026Updated 3 months ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month
- Clean Indirect Syscalls with Syscall Tampering.☆44Updated this week
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆398Aug 16, 2026Updated 2 months ago
- ☆19Dec 11, 2025Updated 10 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆159Sep 27, 2026Updated last month
- CVE-2026-24294 PoC☆62Apr 30, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆320Jun 28, 2026Updated 4 months ago
- A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more☆97Updated this week
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆75Jul 14, 2026Updated 3 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆54Jun 28, 2026Updated 4 months ago
- KHAOS is a modern C2 framework that routes agent traffic through cloud services already trusted by enterprise networks.☆250Sep 15, 2026Updated last month
- A stealthy and modular Windows loader designed to bypass modern EDR solutions using Module Stomping, Stack Duplication, and Advanced Slee…☆113Jul 26, 2026Updated 3 months ago
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 5 months ago
- Windows AppResolver LPE PoC with a filtered-admin-to-SYSTEM demonstration☆14Jul 17, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- another PrivEsc potato...☆122Sep 5, 2026Updated last month
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆145Jul 7, 2026Updated 3 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆61Jul 4, 2026Updated 3 months ago
- Abusing the win32k.sys kernel callback mechanism for arbitrary code execution☆121Apr 10, 2026Updated 6 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory.☆66Mar 2, 2026Updated 7 months ago
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆37Feb 17, 2026Updated 8 months ago