itaymigdal / GetSystem
Spawn SYSTEM shells like a PRO!
☆13Updated last year
Related projects ⓘ
Alternatives and complementary repositories for GetSystem
- PoC XLL builder in Python/Nim☆41Updated 2 years ago
- NimReflectiveLoader is a Nim-based tool for in-memory DLL execution using Reflective DLL Loading.☆26Updated 10 months ago
- Sleep obfuscation for shellcode implants and their reflective shit☆52Updated last year
- ☆47Updated last year
- A simple Nim stager (w/ fiber execution)☆16Updated 2 years ago
- malware written for educational purposes☆60Updated last week
- Threadless shellcode injection tool☆61Updated 3 months ago
- Nim process hollowing loader☆47Updated 3 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆38Updated 11 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Updated 4 months ago
- Unused DLL hollowing PoC in Nim☆16Updated 2 years ago
- Section-based payload obfuscation technique for x64☆58Updated 3 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆55Updated 3 months ago
- Indirect syscalls + DInvoke made simple.☆86Updated 3 weeks ago
- Sample Rust Hooking Engine☆34Updated 7 months ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆46Updated 6 months ago
- Template-based generation of shellcode loaders☆67Updated 7 months ago
- stack spoofing☆53Updated this week
- Heap encryption in Nim☆19Updated 2 months ago
- Windows Thread Pool Injection Havoc Implementation☆28Updated 7 months ago
- ☆58Updated 11 months ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆58Updated 8 months ago
- BOF for C2 framework☆40Updated last week
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated last year
- ☆27Updated 3 months ago
- shell code example☆14Updated this week
- A pure C version of SymProcAddress☆23Updated 8 months ago
- Splitting and executing shellcode across multiple pages☆99Updated last year
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆38Updated 4 months ago
- Collect Windows telemetry for Maldev☆57Updated this week