itaymigdal / PichichiH0ll0werView external linksLinks
Nim process hollowing loader
☆62Jul 22, 2025Updated 6 months ago
Alternatives and similar repositories for PichichiH0ll0wer
Users that are interested in PichichiH0ll0wer are comparing it to the libraries listed below
Sorting:
- A process injection technique using only thread context manipulation☆41Dec 18, 2023Updated 2 years ago
- Poshito is a Windows C2 over Telegram☆18Oct 30, 2024Updated last year
- Spawn SYSTEM shells like a PRO!☆10Mar 8, 2023Updated 2 years ago
- Threadless shellcode injection tool☆68Aug 5, 2024Updated last year
- Sleep obfuscation for shellcode implants and their reflective shit☆53Sep 19, 2023Updated 2 years ago
- Section-based payload obfuscation technique for x64☆64Aug 8, 2024Updated last year
- Another Portable Executable files analysing stuff☆21May 28, 2011Updated 14 years ago
- Heap encryption in Nim☆20Aug 25, 2024Updated last year
- A remote process injection using process snapshotting based on https://gitlab.com/ORCA000/snaploader , in rust. It creates a sacrificial …☆50Jan 25, 2025Updated last year
- A nim implementation of sRDI☆20Oct 18, 2023Updated 2 years ago
- A step-by-step walkthrough of how to write a Client and a Driver to communicate with each other and boost the priority of a thread.☆17Dec 12, 2023Updated 2 years ago
- Parser and reconciliation tooling for large Active Directory environments.☆33Feb 18, 2025Updated 11 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆61May 12, 2025Updated 9 months ago
- ☆21Jan 8, 2026Updated last month
- Nemesis agent for Mythic☆28Dec 11, 2025Updated 2 months ago
- A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…☆465Aug 23, 2023Updated 2 years ago
- Two new offensive techniques using Windows Fibers: PoisonFiber (The first remote enumeration & Fiber injection capability POC tool) Phan…☆280Sep 18, 2024Updated last year
- Panoptes Endpoint Detection and Response Solution☆42Jan 19, 2026Updated 3 weeks ago
- REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs…☆163Feb 22, 2024Updated last year
- Evasive Golang Loader☆137Jul 27, 2024Updated last year
- Example code samples from our ScriptBlock Smuggling Blog post☆95Jun 18, 2024Updated last year
- A simple to use single-include Windows API resolver☆23Jul 9, 2024Updated last year
- Custom mini tools during Red Teaming engagements☆23Jan 20, 2026Updated 3 weeks ago
- Rust crate to obfuscate strings and byte arrays so they are not in memory when not in use.☆19Dec 23, 2025Updated last month
- A basic C2 framework written in C☆59Jul 7, 2024Updated last year
- DLL proxying for lazy people☆198Dec 1, 2025Updated 2 months ago
- A dirty PoC for a reverse shell with cool features in Rust☆186Nov 25, 2025Updated 2 months ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆16Aug 14, 2023Updated 2 years ago
- The most extensive collection of BOFs (Beacon Object Files) tailored for Red Teams using C++23☆23Jun 19, 2025Updated 7 months ago
- A lexer and parser for Sleep☆20May 14, 2025Updated 9 months ago
- ☆18Aug 8, 2024Updated last year
- A high performance Nim implementation of a Cyclic Polynomial Hash, aka BuzHash, and the Rabin-Karp algorithm☆16Apr 2, 2019Updated 6 years ago
- A tiny macro library for protecting sensitive strings in compiled binaries☆40Oct 8, 2024Updated last year
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆33May 30, 2024Updated last year
- WindowSpy is a Cobalt Strike Beacon Object File meant for automated and targeted user surveillance.☆281Feb 24, 2025Updated 11 months ago
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆266Jun 18, 2025Updated 7 months ago
- Nimbo-C2 is yet another (simple and lightweight) C2 framework☆441Jan 29, 2026Updated 2 weeks ago
- Terminate AV/EDR leveraging BYOVD attack☆104Mar 21, 2025Updated 10 months ago
- ☆70Oct 30, 2023Updated 2 years ago