knightswd/ProcessGhosting external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

knightswd/ProcessGhosting

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/knightswd/ProcessGhosting)

Close

knightswd / ProcessGhostingView on GitHubMore

• External links
• Readme badge

☆73Jul 23, 2021Updated 5 years ago

Alternatives and similar repositories for ProcessGhosting

Users that are interested in ProcessGhosting are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• NoOne-hub / bypass-BeaconEye

  View on GitHub
  bypass BeaconEye
  ☆88Sep 9, 2021Updated 5 years ago
• lab52io / StealAllTokens

  View on GitHub
  This PoC uses two diferent technics for stealing the primary token from all running processes, showing that is possible to impersonate a…
  ☆54Nov 4, 2021Updated 4 years ago
• Allevon412 / PPL_Sandboxer

  View on GitHub
  ☆80Feb 12, 2022Updated 4 years ago
• uknowsec / CreateService

  View on GitHub
  创建服务持久化
  ☆108Apr 26, 2021Updated 5 years ago
• NoOne-hub / Beacon.dll

  View on GitHub
  Beacon.dll reverse
  ☆139Sep 5, 2021Updated 5 years ago
• Wordpress hosting with auto-scaling - Free Trial Offer • Ad
  Fully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
• Hagrid29 / DuplicateDump

  View on GitHub
  Dumping LSASS with a duplicated handle from custom LSA plugin
  ☆207Feb 23, 2022Updated 4 years ago
• sv3nbeast / ImgLoaderShellCode

  View on GitHub
  ☆36Sep 7, 2020Updated 6 years ago
• idiotc4t / Reflective-HackBrowserData

  View on GitHub
  HackBrowserData的反射模块
  ☆180Mar 13, 2021Updated 5 years ago
• qigpig / bypass-beacon-config-scan

  View on GitHub
  Bypass cobaltstrike beacon config scan
  ☆83May 24, 2021Updated 5 years ago
• EspressoCake / Self_Deletion_BOF

  View on GitHub
  BOF implementation of the research by @jonasLyk and the drafted PoC from @LloydLabs
  ☆185Oct 3, 2021Updated 5 years ago
• feihong-cs / JspMaster-Deprecated

  View on GitHub
  一款基于webshell命令执行功能实现的GUI webshell管理工具，支持流量加密
  ☆219Jun 4, 2021Updated 5 years ago
• mstxq17 / CVE-2021-1675_RDL_LPE

  View on GitHub
  PrintNightMare LPE提权漏洞的CS 反射加载插件。开箱即用、通过内存加载、混淆加载的驱动名称来ByPass Defender/EDR。
  ☆144Sep 1, 2021Updated 5 years ago
• hl0rey / Web_ExternalC2_Demo

  View on GitHub
  Web ExternalC2 Demo
  ☆52Aug 18, 2020Updated 6 years ago
• wilszdev / SchtasksUacBypass

  View on GitHub
  bypass UAC even when configured to always notify user
  ☆28Aug 31, 2021Updated 5 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• Rostelecom-Red-Team / GoodbyeEDR

  View on GitHub
  ☆83Dec 24, 2021Updated 4 years ago
• Snowming04 / inject_shellcode_message_hook

  View on GitHub
  inject shellcode into remote process via message hook
  ☆15Oct 28, 2020Updated 6 years ago
• EddieIvan01 / win32api-practice

  View on GitHub
  Offensive tools written for practice purposes
  ☆160Sep 23, 2022Updated 4 years ago
• scareing / cmd2shellcode

  View on GitHub
  cmd2shellcode
  ☆78May 6, 2021Updated 5 years ago
• mai1zhi2 / SharpBeacon

  View on GitHub
  CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
  ☆728Sep 1, 2021Updated 5 years ago
• timwhitez / Doge-SelfDelete

  View on GitHub
  Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆27Dec 3, 2021Updated 4 years ago
• trickster0 / CReadMemory

  View on GitHub
  Read Memory without ReadProcessMemory for Current Process
  ☆88Feb 13, 2022Updated 4 years ago
• timwhitez / Doge-HeapAlloc

  View on GitHub
  ☆12Sep 2, 2021Updated 5 years ago
• timwhitez / Doge-Persistence-Platform

  View on GitHub
  后渗透持久化控制平台; Windows Persistence Platform;
  ☆46Sep 16, 2021Updated 5 years ago
• Managed Kubernetes at scale on DigitalOcean • Ad
  DigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
• timwhitez / Doge-Assembly

  View on GitHub
  Golang evasion tool, execute-assembly .Net file
  ☆94Apr 25, 2022Updated 4 years ago
• JDArmy / RPCSCAN

  View on GitHub
  RPC远程主机信息匿名扫描工具
  ☆318Sep 30, 2022Updated 4 years ago
• 0x3rhy / AddUser-Bof

  View on GitHub
  Cobalt Strike BOF that Add an admin user
  ☆82Oct 11, 2022Updated 4 years ago
• hhxy / e-message_exp

  View on GitHub
  e-mesaage <=4.15 后台jar包上传exp
  ☆47Mar 15, 2019Updated 7 years ago
• 1013503897 / RDP-credentials-decrypter

  View on GitHub
  decrypt rdp credentials to password using mimikatz.
  ☆28Oct 19, 2026Updated last week
• A-D-Team / SharpMemshell

  View on GitHub
  Memshell
  ☆300Dec 7, 2021Updated 4 years ago
• eastmountyxz / CVE-2020-0601-EXP

  View on GitHub
  这资源是作者复现微软签字证书漏洞CVE-2020-0601，结合相关资源及文章实现。推荐大家结合作者博客，理解ECC算法、Windows验证机制，并尝试自己复现可执行文件签名证书和HTTPS劫持的例子。作为网络安全初学者，自己确实很菜，但希望坚持下去，加油！
  ☆30Feb 17, 2020Updated 6 years ago
• c1y2m3 / Tailorbox

  View on GitHub
  redteam Build platform
  ☆18Nov 13, 2023Updated 2 years ago
• boku7 / injectEtwBypass

  View on GitHub
  CobaltStrike BOF - Inject ETW Bypass into Remote Process via Syscalls (HellsGate|HalosGate)
  ☆297Sep 28, 2021Updated 5 years ago
• Deploy on Railway without the complexity - Free Credits Offer • Ad
  Connect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
• deepinstinct / LsassSilentProcessExit

  View on GitHub
  Command line interface to dump LSASS memory to disk via SilentProcessExit
  ☆457Dec 23, 2020Updated 5 years ago
• WBGlIl / Beacon_re

  View on GitHub
  ☆88Jun 28, 2022Updated 4 years ago
• iammaguire / Gotato

  View on GitHub
  Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.
  ☆115Jun 7, 2021Updated 5 years ago
• jbaines-r7 / blankspace

  View on GitHub
  Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)
  ☆64Feb 14, 2022Updated 4 years ago
• ChoiSG / UuidShellcodeExec

  View on GitHub
  PoC for UUID shellcode execution using DInvoke
  ☆156Mar 8, 2021Updated 5 years ago
• timwhitez / Doge-Defense-Evasion-Ref

  View on GitHub
  Defense Evasion & Bypass AntiVirus reference
  ☆70Mar 28, 2021Updated 5 years ago
• ChaitanyaHaritash / Callback_Shellcode_Injection

  View on GitHub
  POCs for Shellcode Injection via Callbacks
  ☆415Feb 23, 2021Updated 5 years ago