Prime a process for injection when S1 is present
☆13Feb 8, 2025Updated last year
Alternatives and similar repositories for SentinelGone
Users that are interested in SentinelGone are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆47Oct 11, 2025Updated last year
- A synergized Visual Studio and Rust development environment☆18Jan 25, 2025Updated last year
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆52Aug 10, 2026Updated 2 months ago
- Windows Portable Device COM BOF☆17Mar 30, 2026Updated 6 months ago
- Proof of concept demonstrating a method of proxying syscalls indirectly☆10Jul 3, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Hotkey-based keylogger for Windows☆33Jul 19, 2026Updated 2 months ago
- Beacon Object File (BOF) implementation of the dnscmd.exe functionality used to obtain remote code execution on an ADIDNS server by explo…☆57Jul 8, 2026Updated 3 months ago
- Patchless ETW & AMSI bypass POC reverse-engineered from Turla’s Kazuar v3 loader.☆24Jan 14, 2026Updated 9 months ago
- ☆12Feb 26, 2025Updated last year
- Crystal Palace library for proxying Nt API calls via the Threadpool. Updated for call gadgets.☆23Nov 11, 2025Updated 11 months ago
- Collection of scripts that I created to make my life easier.☆12May 10, 2021Updated 5 years ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 2 months ago
- Mentally ill EtwTi parser☆74Jan 11, 2026Updated 9 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- Demonstration of triggering non-maskable interrupts using nt&hal API on windows.☆10Jun 27, 2022Updated 4 years ago
- ☆22Aug 14, 2026Updated 2 months ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- Azure Blob Storage C2 Profile for Mythic☆30Sep 28, 2026Updated 2 weeks ago
- Direct3D 11 Screenshot BOF☆11Nov 2, 2025Updated 11 months ago
- Async BOF that notifies the operator when a user connects to a local or remote target system.☆34Jul 30, 2026Updated 2 months ago
- RISC-V VM based shellcode loader PoC - Still WIP☆38Aug 1, 2026Updated 2 months ago
- Porting of NPPSPY by Grzegorz Tworek to 'man in the middle' the user logon process, and store the user's name and password in an unassumi…☆20Apr 24, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A x64 binary packer written in Rust.☆33Jul 30, 2026Updated 2 months ago
- Proof-of-concept implementation of AI-enabled postex DLLs☆97Sep 10, 2025Updated last year
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 3 months ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated last year
- Post-ex tool to interact with chromium browser when CDP is enabled☆47May 15, 2026Updated 5 months ago
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- Find and fix OPSEC leaks in your PE files before defenders do☆46Jul 22, 2026Updated 2 months ago
- A community maintained repository of Beacon Object Files (BOFs) for red team operations, research, and education. Our goal is to provide …☆33Aug 8, 2026Updated 2 months ago
- A reflective DLL development template for the Rust programming language☆122Nov 4, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Simple BOF to read the protection level of a process☆123May 10, 2023Updated 3 years ago
- abusing windows toast notifications for fun and user manipulation☆106Jul 11, 2026Updated 3 months ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 7 months ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆67Sep 21, 2026Updated 3 weeks ago
- An example of an external LLVM plugin module transform pass for the latest versions.☆15Oct 21, 2025Updated 11 months ago
- Samples for the article "Interception and modifying TCP connections from kernel on Windows and Linux systems"☆14Jun 30, 2026Updated 3 months ago
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆40Apr 6, 2026Updated 6 months ago