sigreturn-oriented(SROP) based sleep obfuscation poc for Linux
☆70Dec 15, 2025Updated 10 months ago
Alternatives and similar repositories for sigdream
Users that are interested in sigdream are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- dcsync bof☆54Feb 13, 2026Updated 8 months ago
- 🥱😴🛌💤☆21Jun 21, 2026Updated 4 months ago
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆136Dec 23, 2025Updated 10 months ago
- A collection of position independent coding resources☆128Nov 15, 2025Updated 11 months ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Evasive shellcode loader for Red Teaming☆20Aug 15, 2025Updated last year
- PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin☆122Jan 4, 2026Updated 10 months ago
- A litterbox integration for the Mythic Command and Control Server☆21Sep 14, 2026Updated last month
- rust port of pspy with support for process monitoring over dbus☆39Jan 4, 2026Updated 10 months ago
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆38Aug 31, 2025Updated last year
- ClickForClickOnce - Generate configurable clickonce payloads☆107Apr 17, 2026Updated 6 months ago
- Shellcode injection using the Windows Debugging API☆185Jan 4, 2026Updated 10 months ago
- Moonwalk++: Simple POC Combining StackMoonwalking and Memory Encryption☆240Dec 17, 2025Updated 10 months ago
- Sleep Obfuscation in Rust☆291Dec 1, 2025Updated 11 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- BOF to impersonate TrustedInstaller via DISM API trigger and thread impersonation☆136Mar 27, 2026Updated 7 months ago
- ☆37Mar 26, 2026Updated 7 months ago
- Tailscale/Headscale C2 profile and agent for Mythic☆35Mar 14, 2026Updated 7 months ago
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆43Dec 1, 2025Updated 11 months ago
- ☆52Sep 29, 2026Updated last month
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 7 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- Chisel new generation, written in rust. SSH under WSS with some customization.☆138Jan 24, 2026Updated 9 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Lightweight binary that joins a device to a Tailscale network and exposes a local SOCKS5 proxy. Designed for red team operations and ephe…☆576Oct 3, 2025Updated last year
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- A template for writing Beacon Object Files (BOFs) in Rust☆136Feb 11, 2026Updated 8 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆80Dec 23, 2023Updated 2 years ago
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 10 months ago
- .NET CLR-Stomping☆148May 20, 2026Updated 5 months ago
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 7 months ago
- ☆89Feb 12, 2026Updated 8 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal …☆102Jan 2, 2026Updated 10 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated 2 weeks ago
- Local SYSTEM auth trigger for relaying - X☆172Jul 23, 2025Updated last year
- find dll base addresses without PEB WALK☆171Jul 13, 2025Updated last year
- A reflective DLL development template for the Rust programming language☆123Nov 4, 2025Updated last year
- adws enumeration bof☆176Sep 1, 2026Updated 2 months ago
- One WSL BOF to rule them all☆190Jan 14, 2026Updated 9 months ago