jseclab / obj2shellcodeLinks
shellcode生成框架
☆86Updated 10 months ago
Alternatives and similar repositories for obj2shellcode
Users that are interested in obj2shellcode are comparing it to the libraries listed below
Sorting:
- An implementation of an indirect system call☆127Updated last year
- vehsyscall:a syscall project that may bypass EDR☆59Updated last year
- Beacon compiled using clang☆69Updated 2 years ago
- IDA Python script for generating Windows x86 shellcode with one click☆37Updated last year
- A method to execute syscalls while bypassing EDR's function hooking and call stack analysis.☆14Updated last month
- A C Implementation for Bypassing Security Software☆26Updated last month
- more conveniently Visual-Studio-BOF-template☆65Updated last year
- A Blind EDR Project for Educational Purposes☆35Updated 4 months ago
- ☆30Updated last year
- 自定义函数堆栈,从而绕过ETW检测,这个是完整版。☆14Updated last year
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆49Updated last year
- 复现《EDR的梦魇:Storm-0978使用新型内核注入技术“Step Bear”》☆131Updated 7 months ago
- 简单安排一下 autochk.sys 这个rootkit☆71Updated 2 years ago
- Kill Protected Process Light Process (include av)☆56Updated last year
- Use COM Component Bypass UAC,Dll Version☆35Updated 4 years ago
- Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…☆72Updated last year
- Evasive loader to bypass static detection☆60Updated last year
- Binary Hollowing☆75Updated 8 months ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆55Updated 3 weeks ago
- Self Cleanup in post-ex job☆55Updated 8 months ago
- ☆91Updated 3 years ago
- Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique☆63Updated 2 years ago
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆67Updated 2 years ago
- Silently Install Chrome Extension For Persistence☆51Updated 10 months ago
- ☆26Updated last year
- power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes☆46Updated 3 years ago
- A packer which adds encrypted shell to protect your PE file☆23Updated 6 months ago
- ShadeLoader is a shellcode loader designed to bypass most antivirus software. 壳代码, 杀毒软件, 绕过☆40Updated last week
- ☆40Updated last year
- 通杀检测基于白文件patch黑代码的免杀技术的后门☆162Updated 9 months ago