kyleavery / pendulum
Linux Sleep Obfuscation
☆91Updated last year
Alternatives and similar repositories for pendulum:
Users that are interested in pendulum are comparing it to the libraries listed below
- ☆96Updated last year
- ☆47Updated last year
- BOF for C2 framework☆40Updated 2 months ago
- ☆28Updated 7 months ago
- Section-based payload obfuscation technique for x64☆59Updated 5 months ago
- An In-memory Embedding of CPython☆25Updated 3 years ago
- based on https://gitlab.com/ORCA000/snaploader☆42Updated last month
- Load and execute a common object file format (COFF) in the current process☆26Updated 10 months ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆39Updated last year
- A work in progress BOF/COFF loader in Rust☆46Updated last year
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated last year
- Sliver agent rewritten in C++☆43Updated 4 months ago
- A cmkr based win32 shellcode template for a unified build platform and more production friendly structure/testing.☆65Updated last month
- macOS dylib stager☆26Updated this week
- ☆45Updated 2 months ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆60Updated 10 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆38Updated last year
- Sample Rust Hooking Engine☆35Updated 9 months ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆84Updated 11 months ago
- A process injection technique using only thread context manipulation☆25Updated last year
- Creation and removal of Defender path exclusions and exceptions in C#.☆30Updated last year
- Rewrite to fit my needs☆27Updated 5 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆39Updated 6 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆77Updated 3 months ago
- A more reliable way of resolving syscall numbers in Windows☆50Updated 11 months ago
- Execute dotnet app from unmanaged process☆67Updated 2 weeks ago
- ☆80Updated 7 months ago
- Beacon Object Files (not Buffer Overflows)☆53Updated last year
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆45Updated 10 months ago