Bypass AMSI via PowerShell by splitting a file into multiple chunks
☆53Jul 22, 2021Updated 5 years ago
Alternatives and similar repositories for PowerChunker
Users that are interested in PowerChunker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A custom run space to bypass AMSI and Constrained Language mode in PowerShell.☆20May 17, 2023Updated 3 years ago
- ☆14Aug 26, 2021Updated 5 years ago
- Quickly generate every payload type for each listener and optionally host via HTTP.☆22Aug 23, 2021Updated 5 years ago
- ☆20Mar 21, 2024Updated 2 years ago
- Small project to facilitate creation of .lnk payloads☆84Nov 18, 2022Updated 3 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- SSH Honeypot that gathers creds and attempted commands☆19Apr 19, 2021Updated 5 years ago
- Passworld is a fully customizable wordlist generator☆16Sep 13, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that uses RegConnectRegistryA + RegOpenKeyExA API to dump registry hives on remote computer☆18Mar 4, 2023Updated 3 years ago
- Weaponized HellsGate/SigFlip☆204Jun 7, 2023Updated 3 years ago
- Patching AmsiOpenSession by forcing an error branching☆153Aug 2, 2023Updated 3 years ago
- PoC for generating an APPWIZ.cpl module designed to be loaded by Fondue.exe LOLBin☆16Jan 2, 2026Updated 10 months ago
- Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2☆186Jul 21, 2022Updated 4 years ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Demonstrates consuming from a SecurityTrace ETW session by consuming from the Threat-Intelligence ETW provider without a driver or PPL pr…☆14Jan 18, 2026Updated 9 months ago
- Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL (as in RecycledGate).☆186Feb 12, 2023Updated 3 years ago
- A C# project that builds a Web Application which redirects all HTTPS☆28Feb 11, 2025Updated last year
- Beacon Object File to locate and suspend the threads hosting the Event Log service☆29Jun 17, 2022Updated 4 years ago
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- Interact with Windows RPC Services over SMB using go-smb☆11Jul 6, 2026Updated 3 months ago
- Malicious powershell scripts loader designed to avoid detection.☆64Jun 16, 2023Updated 3 years ago
- Proof of Concept in Go from Secureworks' research on Azure Active Directory Brute-Force Attacks. Inspired by @treebuilder's POC on PowerS…☆14Feb 23, 2022Updated 4 years ago
- C++ WinRM API via Reflective DLL☆144Sep 11, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆258Jul 7, 2022Updated 4 years ago
- Using syscall to load shellcode, Evasion techniques☆26Jul 18, 2021Updated 5 years ago
- PowerShell Script Obfuscator☆606Nov 2, 2023Updated 3 years ago
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- This is an advanced Windows loader framework designed for stealthy code injection, anti-analysis, and evasion. It combines direct system …☆14Aug 6, 2025Updated last year
- Golang C2 and Beacon/Agent built from the ground up for scalability and expandability☆13Mar 16, 2021Updated 5 years ago
- A .NET malware loader, using API-Hashing to evade static analysis☆205May 30, 2023Updated 3 years ago
- An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity.☆145Oct 28, 2021Updated 5 years ago
- Stop Defender Service using C# via Token Impersonation☆171Jan 30, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆450Mar 8, 2023Updated 3 years ago
- Yet, Another Packer/Loader☆25Feb 26, 2023Updated 3 years ago
- Parses logs created by Cobalt Strike, Brute Ratel, OC2 and creates an SQLite DB which can be used to create custom reports.☆33Jul 4, 2026Updated 4 months ago
- OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…☆545Sep 18, 2022Updated 4 years ago
- Combined PowerShell and CMD Reverse Shell☆15Oct 31, 2019Updated 7 years ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆51Jul 29, 2024Updated 2 years ago
- Some of my custom "tools".☆28Feb 21, 2022Updated 4 years ago