Add an empty section to a PE file
☆52Aug 8, 2017Updated 9 years ago
Alternatives and similar repositories for addscn
Users that are interested in addscn are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- A flexible tool that creates a minidump of the LSASS process☆14Jan 18, 2022Updated 4 years ago
- Collection of Win32 with C++/Assembly for Hooking, Patch and Reversing PE file☆18Nov 7, 2022Updated 3 years ago
- Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD☆28Jan 4, 2024Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- It stinks☆100Apr 22, 2022Updated 4 years ago
- This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…☆54Nov 4, 2021Updated 4 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆39Dec 31, 2020Updated 5 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆57Feb 2, 2026Updated 8 months ago
- Get your data from the resource section manually, with no need for windows apis☆66Oct 22, 2024Updated 2 years ago
- Crossplatform tool for inject shellcode into .exe and .dll binaries (x86 and x64)☆78Dec 22, 2025Updated 10 months ago
- C++ Code to Bypass Sandbox and VM via RAM and Core victim info☆10Apr 3, 2023Updated 3 years ago
- Just an example of a well-known technique to detect memory tampering via Windows Working Sets.☆18Jan 15, 2022Updated 4 years ago
- PDF Icon File Type Spoofer☆17Jul 8, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Socat compiled as static binary☆12Feb 12, 2017Updated 9 years ago
- Windows Kernel Programming Experiments☆84Sep 18, 2022Updated 4 years ago
- Patch (block) whatever function you want in a remote process. Adding a ret instruction at the first memory address of this function, the …☆13Jul 11, 2024Updated 2 years ago
- Enumerating EDR WhiteListed Processes☆12Jan 30, 2025Updated last year
- Collection of DNS Command and Control Servers for Red Teaming☆11Apr 28, 2025Updated last year
- Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF☆44Jun 23, 2022Updated 4 years ago
- AdminX it's a Malware to execute process as some users from a Windows OS☆12May 4, 2023Updated 3 years ago
- Simple C++ Reverse Shell☆14Nov 22, 2022Updated 3 years ago
- Walks through the 4-level paging structures in Windows x64☆14Feb 12, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- C++ keylogger to save all the keys pressed into a local txt file☆12Apr 6, 2023Updated 3 years ago
- C++ Code to Patch AMSI in Remote Processes☆10Mar 11, 2025Updated last year
- BOF/COFF obj file to PIC(shellcode). by golang☆40Sep 28, 2022Updated 4 years ago
- Linux Malware creator to attack Windows System via Reverse Shell with FindWindow Process Code Injection☆20Mar 18, 2023Updated 3 years ago
- C++ Code to Extract Windows File and Receive in Linux Machine☆13Mar 29, 2023Updated 3 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- POC for frustrating/defeating Malware Analysts☆153Jun 12, 2022Updated 4 years ago
- 从admin冲到TrustedInstaller☆17Feb 3, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- PEBFake(修改PEB 伪装当前进程路径、参数等)☆53Jan 19, 2021Updated 5 years ago
- My Own VirtualAlloc Implementation to use as alternative unknown for all the defense solutions of VirtualAlloc Win32 API Function☆13Jan 30, 2024Updated 2 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆141Feb 2, 2026Updated 8 months ago
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆68May 2, 2023Updated 3 years ago
- ☆507Aug 14, 2022Updated 4 years ago
- Post-Exploitation Tool to Steal MySQL Data, and with persistence extract all data from MySQL table every time that Windows are opened wit…☆15Apr 2, 2023Updated 3 years ago
- Heartbleed OpenSSL exploit☆14Apr 11, 2014Updated 12 years ago