heikipikker / Ender-Rat
Remote Administration Tool For Windows
☆13Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for Ender-Rat
- WORK IN PROGRESS. RAT written in C++ using Win32 API☆18Updated 5 years ago
- Enumerate the DLLs/Modules using NtQueryVirtualMemory☆33Updated 9 years ago
- A kernel mode Windows rootkit in development.☆49Updated 2 years ago
- Windows Sandbox Framework☆36Updated 2 years ago
- Process Hollowing Packer☆25Updated 7 years ago
- The project was upgraded from https://coder.pub/ and supported VS2017. The original author wrote the detailed design ideas documentation…☆19Updated 7 years ago
- a open source rat from china☆24Updated 8 years ago
- A tool is used to infected a shellcode to PE file, the shellcode is packed at compile time and unpacked at runtime☆13Updated 4 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆29Updated 3 years ago
- PEBFake(修改PEB 伪装当前进程路径、参数等)☆49Updated 3 years ago
- Open-source EDR kernel-component for system monitoring and DLL injection☆30Updated 4 years ago
- Add export function and convert exe to dll☆25Updated 4 years ago
- Loader and RunPE file executer☆17Updated 5 years ago
- x86/x64 dll injector☆29Updated 2 years ago
- Convert native dll to shellcode, and support exported function☆22Updated 3 years ago
- HTTPS GET RAT and Memory Loader☆25Updated 2 years ago
- Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers☆16Updated 3 years ago
- Copy xRAT repository☆22Updated 6 years ago
- Simple remote administration tool. Written in c++ and MASM.☆18Updated 6 years ago
- Collection of shellcode injection and execution techniques☆16Updated 3 years ago
- TCP Asynchronous Socket - Remote Administration Tool☆10Updated 5 years ago
- 获取浏览器保存密码，支持IE、Chrome和火狐☆12Updated 5 years ago
- Rebuild of the original Remote Admin Tool☆9Updated 4 years ago
- Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler☆26Updated 3 years ago
- Maintain Windows Persistence with an evil Netshell Helper DLL☆12Updated 6 years ago
- This is a project to receive Base64 data and decode it in process☆14Updated 4 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆38Updated 3 years ago