☆44Oct 27, 2026Updated last week
Alternatives and similar repositories for tprtdll-Injection
Users that are interested in tprtdll-Injection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LPE Proof-of-Concept for Windows 11 abusing TrustedInstaller's Component Based Servicing (CBS) session COM object and junctions for arbit…☆55Updated this week
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆111Oct 27, 2026Updated last week
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆48Oct 18, 2026Updated 2 weeks ago
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆70Oct 7, 2026Updated 3 weeks ago
- Generate proxy DLLs for sideloading and hijacking research. Mirrors exports, embeds originals, runs payloads.☆17Jun 16, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A PoC tool for the Pass-ta-key Golden Attack, covering the extraction of the Google Password Manager Security Domain Secret (SDS) from Ch…☆27Updated this week
- Local Windows credential extraction☆26Jul 14, 2026Updated 3 months ago
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆40Oct 14, 2026Updated 3 weeks ago
- ☆37May 19, 2026Updated 5 months ago
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- BOF exploiting the Visual Studio Installer Elevation Service for SYSTEM LPE and persistence via AppDomainManager hijacking, with native E…☆88Aug 5, 2026Updated 2 months ago
- Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2)☆103Oct 27, 2026Updated last week
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆171Sep 13, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆18Oct 3, 2026Updated last month
- Remote process injection via TP_DIRECT.Callback hijack☆39Updated this week
- PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping☆39May 12, 2026Updated 5 months ago
- SCADAver: a Rust-powered, multi-protocol OT/ICS security framework for authorized labs featuring asset discovery, enumeration, controlled…☆89Aug 29, 2026Updated 2 months ago
- ☆37Nov 8, 2024Updated last year
- EDRUnChoker - fileless WMI defense that removes EDRChoker QoS throttling policies☆49Jun 8, 2026Updated 4 months ago
- Remap ntdll.dll using only NTAPI functions with a suspended process☆29Apr 13, 2025Updated last year
- Application-scoped Windows network brownouts in native C and BOF form☆23Aug 18, 2026Updated 2 months ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆42Apr 6, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Crypter developed in Rust, featuring the implementation of various injection and evasion techniques, and including a builder with an intu…☆22Jul 18, 2026Updated 3 months ago
- Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible i…☆69Apr 2, 2025Updated last year
- MCP-powered reverse engineering platform connecting WinDbg, IDA Pro & x64dbg with 160+ AI-accessible debugging and analysis tools.☆31Sep 23, 2026Updated last month
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated last month
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated last month
- Find Windows RWX Memory Regions depending on the memory space needed☆18Nov 26, 2023Updated 2 years ago
- ☆17Sep 21, 2026Updated last month
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆160Sep 27, 2026Updated last month
- Kassandra is a custom Mythic C2 agent written in Rust, containerized via a Python-based builder☆25Jul 31, 2026Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆22Oct 4, 2026Updated 3 weeks ago
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender.☆28Jul 14, 2026Updated 3 months ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 5 months ago
- Patchless ETW & AMSI bypass POC reverse-engineered from Turla’s Kazuar v3 loader.☆24Jan 14, 2026Updated 9 months ago
- Demonstration of the DLL party process injection technique☆98Oct 1, 2026Updated last month
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆68Oct 25, 2026Updated last week