irohaneABC / ShellCodeBuildandloadexeLinks
这是一个shellcode简单的示例demo，使目标exe程序转换为shellcode可执行程序的一个demo【并不打算后期维护】，两年前写的，我发现被工作磨平了对技术的探索，今天翻到发现的。
☆10Updated 2 years ago
Alternatives and similar repositories for ShellCodeBuildandloadexe
Users that are interested in ShellCodeBuildandloadexe are comparing it to the libraries listed below
Sorting:
- A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.☆37Updated last year
- vehsyscall:a syscall project that may bypass EDR☆60Updated last year
- create schtasks bypass AV☆22Updated last year
- 一个demo☆23Updated last year
- 制作 shellcode 的模板☆28Updated last year
- A packer which adds encrypted shell to protect your PE file☆25Updated last year
- SysWhispers3WinHttp 基于SysWhispers3项目增添WinHttp分离加载功能并使用32位GCC进行编译，文件大小14KB，可免杀绕过360核晶防护与Defender☆32Updated 2 years ago
- 免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus☆72Updated 3 years ago
- more conveniently Visual-Studio-BOF-template☆71Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆65Updated last month
- Self Cleanup in post-ex job☆58Updated last year
- Remote Download and Memory Execute for shellcode framework☆96Updated 3 years ago
- ☆69Updated last year
- 重构Beacon☆15Updated last year
- Stack integrity verification to Detect SleepMask or CallStack Spoofer☆37Updated 4 months ago
- 个人学习使用，二开DcRAT，主要是增加了功能性插件☆17Updated last year
- golang+c#乱写了一个基于http的垃圾远控(支持团队协同作战,功能很少)(三端)☆43Updated 3 years ago
- Binary Hollowing☆84Updated last year
- Call the CLR interface from memory to load powershell, process-less powershell☆15Updated 2 years ago
- ☆11Updated 3 years ago
- 一个2020年练手的基于gin框架搞的在线免杀平台，支持后台管理，邀请码注册等☆39Updated last year
- A decentralized basic Trojan framework that eliminates C2 mode and is implemented by P2P, the core networking technology of blockchain☆45Updated last year
- 基于个人习惯使用C/C++的shellcode开发项目模板☆48Updated last year
- XOR 加密 分离免杀☆67Updated last year
- 复现《EDR的梦魇：Storm-0978使用新型内核注入技术“Step Bear”》☆140Updated last year
- SigFlip与白加黑的完美结合。☆29Updated 6 months ago
- ☆28Updated 2 years ago
- 一种通过进程注入实现强制关闭部分杀软进程 的方法（以360安全卫士和360杀毒为例）☆137Updated last year
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆75Updated 8 months ago
- Delete file regardless of whether the handle is used via SetFileInformationByHandle☆55Updated 2 years ago