klezVirus / NimlineWhispers3
A tool for converting SysWhispers3 syscalls for use with Nim projects
☆143Updated 2 years ago
Alternatives and similar repositories for NimlineWhispers3:
Users that are interested in NimlineWhispers3 are comparing it to the libraries listed below
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆89Updated 2 years ago
- ☆150Updated last year
- Cobalt Strike User Defined Reflective Loader (UDRL). Check branches for different functionality.☆135Updated 2 years ago
- ☆88Updated 2 years ago
- ☆138Updated last year
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem …☆111Updated last year
- ErebusGate for Nim Bypass AV/EDR☆161Updated 2 years ago
- AV/EDR evasion via direct system calls.☆107Updated last year
- ☆180Updated last year
- A simple BOF that frees UDRLs☆115Updated 2 years ago
- Implant drop-in for EDR testing☆134Updated last year
- Do some DLL SideLoading magic☆78Updated last year
- I have documented all of the AMSI patches that I learned till now☆71Updated last year
- Simple BOF to read the protection level of a process☆114Updated last year
- ☆120Updated last year
- ☆139Updated 2 years ago
- ☆61Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated last year
- Tool for playing with Windows Access Token manipulation.☆53Updated 2 years ago
- A tool for converting SysWhispers2 syscalls for use with Nim projects☆118Updated 3 years ago
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆224Updated last year
- BOF combination of KillDefender and Backstab☆163Updated last year
- ☆115Updated last year
- Patching AmsiOpenSession by forcing an error branching☆143Updated last year
- POC tools for exploring SMB over QUIC protocol☆121Updated 2 years ago
- An App Domain Manager Injection DLL PoC on steroids☆164Updated last year
- ApexLdr is a DLL Payload Loader written in C☆110Updated 6 months ago
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆118Updated 2 years ago
- D/Invoke implementation in Nim☆100Updated 2 years ago
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆92Updated 2 years ago