Transparently call NTAPI via Halo's Gate with indirect syscalls.
☆13Apr 26, 2024Updated 2 years ago
Alternatives and similar repositories for NtGate
Users that are interested in NtGate are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- Various methods of executing shellcode☆74Mar 27, 2023Updated 3 years ago
- Library of BOFs to interact with SQL servers☆16Dec 6, 2024Updated last year
- Excel Add In Payload Generator☆15Oct 9, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- NTAPI hook bypass with (semi) legit stack trace☆19May 9, 2023Updated 3 years ago
- C2 redirector as a web API☆10May 22, 2021Updated 5 years ago
- Direct syscalls Injection to bypass AV/EDR☆10May 18, 2024Updated 2 years ago
- Its a coff loader ported to go☆20Oct 2, 2022Updated 3 years ago
- ☆13Jun 22, 2017Updated 9 years ago
- Inject shellcode into process via "EarlyBird"☆27Aug 30, 2021Updated 4 years ago
- Callstack spoofing using a VEH because VEH all the things.☆24Mar 18, 2025Updated last year
- Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low…☆147May 6, 2023Updated 3 years ago
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆19Oct 28, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Little program written in C# to bypass EDR hooks and dump the content of the lsass process☆60Jun 24, 2021Updated 5 years ago
- Golng version of SharpDump that can be used to extract LSASS or any other proces. Provides token elevation prior to creating dump of high…☆20Oct 6, 2020Updated 5 years ago
- A mechanism that trampoline hooks functions in x86/x64 systems.☆21Oct 9, 2024Updated last year
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- Red Team Server (RTS)☆16Apr 16, 2026Updated 3 months ago
- MalDev & AV-EDR Evasion for Pentesters☆20Feb 17, 2023Updated 3 years ago
- Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"☆31Jan 14, 2023Updated 3 years ago
- CSMTP allow you to send email via command line and save message in sent folder☆12Jan 21, 2018Updated 8 years ago
- Automated (kinda) deployment of MalRDP infrastructure with Terraform & Ansible☆12Sep 15, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…☆75Feb 11, 2024Updated 2 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆16Jan 7, 2023Updated 3 years ago
- some AV / EDR / analysis studies☆10May 21, 2023Updated 3 years ago
- A pure C version of SymProcAddress☆29Mar 17, 2024Updated 2 years ago
- a c++ game server☆11Jul 29, 2015Updated 10 years ago
- Terminate AV/EDR leveraging BYOVD attack☆105Mar 21, 2025Updated last year
- EDR/AV Simulation for Malware Development☆13Oct 21, 2023Updated 2 years ago
- API hooking and code injection made easy!☆40Aug 22, 2023Updated 2 years ago
- HookDetection☆44Sep 3, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …☆291Aug 1, 2025Updated 11 months ago
- An example of how to use Microsoft Windows Warbird technology☆96Apr 23, 2023Updated 3 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell onto webserver☆13Dec 27, 2023Updated 2 years ago
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated 10 months ago
- A repository filled with ideas to break/detect direct syscall techniques☆26Apr 21, 2022Updated 4 years ago
- BloodyAv is Custom Shell Code loader to Bypass Av and Edr.☆15Mar 21, 2022Updated 4 years ago