Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique It runs only c/c++/asm based binaries.
☆11Jul 18, 2025Updated last year
Alternatives and similar repositories for RemotePE
Users that are interested in RemotePE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is the AV ("protection solution") used for my windows 10 rootkit main project. this includes the installer stager program, a service…☆13May 2, 2024Updated 2 years ago
- ☆14Apr 7, 2018Updated 8 years ago
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- vs2019 环境 Gh0st编译通过☆14Nov 28, 2021Updated 4 years ago
- Nightshade is a Windows Memory Manipluation library specifically for injecting DLLs and Game Hacking☆12Dec 12, 2022Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Steganography Reverse Shell☆10Apr 22, 2023Updated 3 years ago
- C# loader capable of running stage-1 from remote url, file path as well as file share☆15Feb 8, 2023Updated 3 years ago
- A tool designed to increase privacy on Windows and counter malware using various techniques.☆13Oct 11, 2026Updated last week
- Dynamic BYOVD-based mapper that has capabilities to change implementations for unsigned driver mapping☆11Aug 24, 2024Updated 2 years ago
- Simple IOCTL hooking driver for Kernel- User - Mode communication.☆11Jul 26, 2020Updated 6 years ago
- Execute Remote Assembly with args passing and with AMSI and ETW patching .☆33Jul 22, 2026Updated 3 months ago
- ☆28Sep 17, 2024Updated 2 years ago
- A platform for ingesting user phishing reports, processing, triage, and response.☆13Jul 28, 2017Updated 9 years ago
- ☆10Oct 11, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This script is used to bypass DLL Hooking using a fresh mapped copy of ntdll file, patch the ETW and trigger a shellcode with process hol…☆74Feb 11, 2024Updated 2 years ago
- ☆51Sep 18, 2020Updated 6 years ago
- External Hooking ( Bypasss process byte patching checks | Injector included )☆21Mar 12, 2023Updated 3 years ago
- A tools help you to get root.☆15Dec 19, 2016Updated 9 years ago
- [POC Detected]Bypass BE Anti Dll Injection (POC/Need Driver)☆18Mar 30, 2020Updated 6 years ago
- Kernel<->Usermode shared memory communcation using manually mapped driver☆24Dec 12, 2021Updated 4 years ago
- A dynamic HTTP/S stager that lets one shellcode loader be reused for different encrypted payloads - no rebuilds.☆20Oct 1, 2025Updated last year
- ☆16Jun 16, 2021Updated 5 years ago
- Token impersonation. Administrator to SYSTEM. No tools required.☆17Mar 26, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- 编译时混淆字符串，以确保生成的二进制PE不会暴漏明文字符串。（C++ 14 及以上）☆30Sep 30, 2021Updated 5 years ago
- A remote control platform 远控，超强远控框架☆21Jan 22, 2020Updated 6 years ago
- EventLogSilencer is a PowerShell script designed for disable Windows Event Logging☆19Oct 28, 2023Updated 2 years ago
- the most basic DLL ever to pop a cmd.☆25Jul 11, 2020Updated 6 years ago
- Fully automated Python script that creates a PNG image from predefined chunks, encodes it to Base64, and saves both the PNG file and the …☆16Feb 13, 2026Updated 8 months ago
- Enumerate the Domain for Readable and Writable Shares☆24Oct 15, 2026Updated last week
- An implementation of an indirect system call☆133Aug 25, 2023Updated 3 years ago
- Kernel mode to user mode dll injection.☆13Nov 10, 2024Updated last year
- A Collection of all underrated websites, you should know about them but don't.☆14Jul 7, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro…☆18Nov 20, 2020Updated 5 years ago
- NTDLL unhooking via Parun's Fart technique to bypass EDR userland hooks☆77Feb 15, 2023Updated 3 years ago
- Only for educational purposes☆11Jun 17, 2023Updated 3 years ago
- Use rpc null sessions to retrieve machine list, domain admin list, domain controllers☆13Dec 15, 2022Updated 3 years ago
- ☆23Jun 6, 2026Updated 4 months ago
- 一个2020年练手的基于gin框架搞的在线免杀平台，支持后台管理，邀请码注册等☆39Sep 12, 2024Updated 2 years ago
- ☆11Apr 18, 2018Updated 8 years ago