joaoviictorti / shadow-rs

Related projects ⓘ

Alternatives and complementary repositories for shadow-rs

• memN0ps / venom-rs
  Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)
  ☆321Updated 8 months ago
• Offensive-Panda / RWX_MEMEORY_HUNT_AND_INJECTION_DV
  Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.
  ☆244Updated 5 months ago
• Kudaes / Shelter
  ROP-based sleep obfuscation to evade memory scanners
  ☆323Updated 8 months ago
• memN0ps / arsenal-rs
  Rusty Arsenal - A collection of experimental Process Injection and Post-Exploitation Techniques in Rust
  ☆240Updated last year
• Kudaes / EPI
  Threadless Process Injection through entry point hijacking
  ☆334Updated 2 months ago
• eversinc33 / Banshee
  Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.
  ☆494Updated 7 months ago
• Kudaes / DInvoke_rs
  Dynamically invoke arbitrary unmanaged code
  ☆316Updated last month
• BlackSnufkin / BYOVD
  Some POCs for my BYOVD research and find some vulnerable drivers
  ☆126Updated 2 months ago
• kleiton0x00 / Proxy-DLL-Loads
  A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.
  ☆325Updated 5 months ago
• 0xHossam / KernelCallbackTable-Injection-PoC
  Proof of Concept for manipulating the Kernel Callback Table in the Process Environment Block (PEB) to perform process injection and hijac…
  ☆171Updated 3 weeks ago
• Maldev-Academy / HellHall
  Performing Indirect Clean Syscalls
  ☆483Updated last year
• BlackSnufkin / NovaLdr
  Threadless Module Stomping In Rust with some features (In memory of those murdered in the Nova party massacre)
  ☆225Updated 4 months ago
• klezVirus / DriverJack
  Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths
  ☆304Updated 3 months ago
• oldboy21 / RflDllOb
  Reflective DLL Injection Made Bella
  ☆200Updated last month
• daem0nc0re / VectorKernel
  PoCs for Kernelmode rootkit techniques research.
  ☆334Updated last week
• Maldev-Academy / Christmas
  ☆245Updated 10 months ago
• pard0p / CallstackSpoofingPOC
  C++ self-Injecting dropper based on various EDR evasion techniques.
  ☆341Updated 9 months ago
• hakaioffsec / CVE-2024-21338
  Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
  ☆283Updated 7 months ago
• tykawaii98 / CVE-2024-30088
  ☆236Updated 3 months ago
• S3cur3Th1sSh1t / Caro-Kann
  Encrypted shellcode Injection to avoid Kernel triggered memory scans
  ☆344Updated last year
• janoglezcampos / llvm-yx-callobfuscator
  LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.
  ☆260Updated 10 months ago
• Nariod / RustPacker
  Template-based shellcode packer written in Rust, with indirect syscall support. Made with <3 for pentesters.
  ☆237Updated 3 months ago
• Kudaes / Unwinder
  Call stack spoofing for Rust
  ☆299Updated 2 months ago
• safedv / RustiveDump
  LSASS memory dumper using only NTAPIs, creating a minimal minidump, built in Rust with no_std and independent of the C runtime (CRT). It …
  ☆268Updated last month
• Krypteria / AtlasLdr
  Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls
  ☆353Updated last month
• WKL-Sec / LayeredSyscall
  Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …
  ☆194Updated 3 months ago
• janoglezcampos / rust_syscalls
  Single stub direct and indirect syscalling with runtime SSN resolving for windows.
  ☆189Updated last year
• Maldev-Academy / EntropyReducer
  Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists
  ☆383Updated last year
• MzHmO / Exploit-Street
  Complete list of LPE exploits for Windows (starting from 2023)
  ☆353Updated last week
• frkngksl / Shoggoth
  Shoggoth: Asmjit Based Polymorphic Encryptor
  ☆679Updated 7 months ago