huoji120/white_patch_detect external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

huoji120/white_patch_detect

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/huoji120/white_patch_detect)

Close

huoji120 / white_patch_detectView on GitHubMore

• External links
• Readme badge

通杀检测基于白文件patch黑代码的免杀技术的后门

☆185Aug 3, 2024Updated 2 years ago

Alternatives and similar repositories for white_patch_detect

Users that are interested in white_patch_detect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• yj94 / BinarySpy

  View on GitHub
  A tool for automatic patch shellcode into binary file to bypass AV. / 一个自动patch shellcode到二进制文件的工具
  ☆580Sep 17, 2026Updated last month
• clownfive / CppDevShellcode

  View on GitHub
  使用Visral Studio开发ShellCode
  ☆239Oct 11, 2023Updated 3 years ago
• huoji120 / APT_Step_Bear_Inject

  View on GitHub
  复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》
  ☆164Oct 27, 2024Updated 2 years ago
• M0nster3 / Beacon

  View on GitHub
  重构Beacon
  ☆165Aug 19, 2024Updated 2 years ago
• yinsel / BypassAV

  View on GitHub
  一款基于PE Patch技术的后渗透免杀工具，主要支持x64
  ☆349Mar 5, 2025Updated last year
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• Neo-Maoku / SearchAvailableExe

  View on GitHub
  寻找可利用的白文件
  ☆563Aug 18, 2025Updated last year
• berryalen02 / PECracker

  View on GitHub
  针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and…
  ☆286Aug 20, 2024Updated 2 years ago
• Neo-Maoku / DllMainHijacking

  View on GitHub
  Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode
  ☆207May 28, 2024Updated 2 years ago
• yinsel / ShellcodeDev

  View on GitHub
  基于个人习惯使用C/C++的shellcode开发项目模板
  ☆49Aug 20, 2024Updated 2 years ago
• timwhitez / BinHol

  View on GitHub
  Binary Hollowing
  ☆96Sep 10, 2024Updated 2 years ago
• lintstar / CS-AutoPostChain

  View on GitHub
  基于 OPSEC 的 CobaltStrike 后渗透自动化链
  ☆447Mar 11, 2024Updated 2 years ago
• sorabug / ChangeTimestamp

  View on GitHub
  一键修改exe、dll的编译时间、创建时间、修改时间和访问时间
  ☆197Apr 16, 2023Updated 3 years ago
• wudun7 / obj2shellcode

  View on GitHub
  shellcode生成框架
  ☆93Jul 11, 2024Updated 2 years ago
• ImCoriander / ZeroEye

  View on GitHub
  自动化找白文件，用于扫描 EXE 文件的导入表，列出导入的DLL文件，并筛选出非系统DLL，符合条件的文件将被复制到特定的 X64 或 X86 文件夹
  ☆641Mar 24, 2026Updated 7 months ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• INotGreen / SharpThief

  View on GitHub
  一键提取exe的图标、嵌入图标、资源信息、版本信息、修改时间、数字签名，降低程序熵值
  ☆434Dec 17, 2024Updated last year
• myzxcg / RealBlindingEDR

  View on GitHub
  Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…
  ☆1,323Jun 21, 2024Updated 2 years ago
• CBLabresearch / PhantomExecution

  View on GitHub
  Self Cleanup in post-ex job
  ☆59Sep 10, 2024Updated 2 years ago
• evilashz / PigScheduleTask

  View on GitHub
  添加计划任务方法集合
  ☆313Aug 6, 2023Updated 3 years ago
• qigpig / Ghosting-BOF

  View on GitHub
  主要用于隐藏进程真实路径，进程带windows真签名
  ☆117Oct 15, 2024Updated 2 years ago
• INotGreen / XiebroC2

  View on GitHub
  渗透测试C2、支持Lua插件扩展、域前置/CDN上线、自定义profile、前置sRDI、文件管理、进程管理、内存加载、截图、反向代理、分组管理
  ☆1,392Feb 28, 2025Updated last year
• Symph0nia / Coda

  View on GitHub
  入侵痕迹清理/Cleaning up traces of intrusion
  ☆258Jul 15, 2026Updated 3 months ago
• wangfly-me / LoaderFly

  View on GitHub
  助力每一位RT队员，快速生成免杀木马
  ☆836Apr 17, 2024Updated 2 years ago
• RoomaSec / RmEye

  View on GitHub
  戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑
  ☆532Oct 25, 2023Updated 3 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• qwqdanchun / Pillager

  View on GitHub
  Pillager是一个适用于后渗透期间的信息收集工具
  ☆1,296Sep 7, 2024Updated 2 years ago
• Pizz33 / 360QVM_bypass

  View on GitHub
  通过生成不同hash的ico并写入程序中，实现批量bypass360QVM
  ☆259Aug 10, 2023Updated 3 years ago
• huaigu4ng / SysWhispers3WinHttp

  View on GitHub
  Syscall免杀
  ☆510Jun 21, 2024Updated 2 years ago
• evilashz / Visual-Studio-BOF-template

  View on GitHub
  more conveniently Visual-Studio-BOF-template
  ☆77Sep 12, 2023Updated 3 years ago
• RoomaSec / RmTools

  View on GitHub
  蓝队应急工具
  ☆539Jun 10, 2024Updated 2 years ago
• Ciyfly / microwaveo

  View on GitHub
  将dll exe 等转成shellcode 最后输出exe 可定制加载器模板 支持白文件的捆绑 shellcode 加密
  ☆364Sep 8, 2022Updated 4 years ago
• 9bie / iatHijackGenerate

  View on GitHub
  白加黑的快速生成器（针对IAT类型）
  ☆116Sep 19, 2022Updated 4 years ago
• baimao-box / Self-Defective-Program

  View on GitHub
  无Windows API的新型恶意程序：自缺陷程序利用堆栈溢出的隐匿稳定攻击技术研究，A new type of malicious program without Windows API
  ☆89Mar 27, 2025Updated last year
• Mephostophiles / PengCode

  View on GitHub
  EXE转ShellCode工具
  ☆245Aug 29, 2022Updated 4 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• p1d3er / port_reuse

  View on GitHub
  golang 实现的windows and linux 端口复用工具。
  ☆311Jan 30, 2024Updated 2 years ago
• Z3ratu1 / geacon_plus

  View on GitHub
  CobaltStrike beacon written in golang
  ☆453Oct 13, 2023Updated 3 years ago
• Getshell / C2

  View on GitHub
  C2-下一代RAT
  ☆540Aug 10, 2024Updated 2 years ago
• 9bie / oss-stinger

  View on GitHub
  利用oss实现http转发/cobalt strike上线
  ☆371Nov 26, 2022Updated 3 years ago
• 1y0n / AVKiller

  View on GitHub
  一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）
  ☆140Dec 26, 2023Updated 2 years ago
• huoji120 / CobaltStrikeDetected

  View on GitHub
  40行代码检测到大部分CobaltStrike的shellcode
  ☆290Jul 25, 2021Updated 5 years ago
• miunasu / NTR_loader

  View on GitHub
  Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术，不使用API进行主线程劫持，不使用PEB…
  ☆94Jul 26, 2025Updated last year