marpie/signed-loaders external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

marpie/signed-loaders

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/marpie/signed-loaders)

Close

marpie / signed-loadersView on GitHubMore

• External links
• Readme badge

signed-loaders documents Windows executables that can be used for side-loading DLLs.

☆70Jan 7, 2019Updated 7 years ago

Alternatives and similar repositories for signed-loaders

Users that are interested in signed-loaders are comparing it to the libraries listed below

• SouhailHammou / Panda-Antivirus-LPE

  View on GitHub
  The exploit for Panda AV LPE
  ☆37May 22, 2019Updated 6 years ago
• scareing / UAC_wenpon

  View on GitHub
  UAC_wenpon
  ☆49Nov 25, 2021Updated 4 years ago
• Mr-Un1k0d3r / MaliciousDLLGenerator

  View on GitHub
  DLL Generator for side loading attack
  ☆175Feb 5, 2019Updated 7 years ago
• DanusMinimus / API-Hash

  View on GitHub
  API hashing written in C to load APIs indirectly using CRC32 hashing
  ☆15Jul 27, 2020Updated 5 years ago
• ricardojoserf / http-protocol-exfil

  View on GitHub
  Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)
  ☆24Oct 23, 2021Updated 4 years ago
• SolomonSklash / initial-scan

  View on GitHub
  A tool for performing an initial information-gathering scan of websites for penetration tests.
  ☆24Aug 27, 2019Updated 6 years ago
• airzero24 / WMIReg

  View on GitHub
  PoC to interact with local/remote registry hives through WMI
  ☆87Jun 14, 2020Updated 5 years ago
• BambiZombie / StagerDemo

  View on GitHub
  一个demo
  ☆23Apr 2, 2024Updated last year
• grayfold3d / POSH-Triage

  View on GitHub
  Tools for parsing Forensic images
  ☆41Dec 14, 2018Updated 7 years ago
• frkngksl / NimicStack

  View on GitHub
  NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs
  ☆94Aug 1, 2022Updated 3 years ago
• Henkru / cs-get-last-error

  View on GitHub
  An aggressor script for Cobalt Strike to query Windows' GetLastError messages
  ☆18Sep 25, 2022Updated 3 years ago
• jm33-m0 / go-cdn2proxy

  View on GitHub
  proxy your C2 traffic through CDN using websocket
  ☆52Jul 24, 2022Updated 3 years ago
• YutuSec / ActiveMQ_Crack

  View on GitHub
  ActiveMQ系列漏洞探测利用工具，包括ActiveMQ 默认口令漏洞及ActiveMQ任意文件写入漏洞（CVE-2016-3088），支持批量探测利用。
  ☆18Apr 2, 2022Updated 3 years ago
• sakkis91 / SandboxPPL

  View on GitHub
  Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.
  ☆12May 28, 2025Updated 9 months ago
• wudicainiao / proxyshell-for-exchange_workload

  View on GitHub
  ☆13Aug 25, 2021Updated 4 years ago
• adamsvoboda / nim-loader

  View on GitHub
  WIP shellcode loader in nim with EDR evasion techniques
  ☆219Mar 30, 2022Updated 3 years ago
• ShorSec / DllNotificationInjection

  View on GitHub
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆32Aug 23, 2023Updated 2 years ago
• mandiant / win10_auto

  View on GitHub
  ☆24Aug 30, 2019Updated 6 years ago
• NotMedic / Invoke-Nanodump

  View on GitHub
  HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection
  ☆58Feb 20, 2022Updated 4 years ago
• N4kedTurtle / ExecuteAssembly_Mailslot

  View on GitHub
  ☆38Oct 12, 2020Updated 5 years ago
• lawiet47 / STFUEDR

  View on GitHub
  Silence EDRs by removing kernel callbacks
  ☆239Dec 7, 2020Updated 5 years ago
• gavz / s4killer

  View on GitHub
  ☆20Feb 6, 2024Updated 2 years ago
• djhohnstein / .NET-Profiler-DLL-Hijack

  View on GitHub
  Implementation of the .NET Profiler DLL hijack in C#
  ☆98Dec 14, 2018Updated 7 years ago
• NVISOsecurity / sigma-public

  View on GitHub
  Generic Signature Format for SIEM Systems
  ☆18Jul 25, 2023Updated 2 years ago
• antonioCoco / MalSeclogon

  View on GitHub
  A little tool to play with the Seclogon service
  ☆326Jul 10, 2022Updated 3 years ago
• Adam-Zhong / Awesome-POC

  View on GitHub
  一个各类漏洞POC知识库
  ☆11Jul 18, 2022Updated 3 years ago
• hasherezade / pe_to_shellcode

  View on GitHub
  Converts PE into a shellcode
  ☆2,752Aug 30, 2025Updated 6 months ago
• ghost-nemesis / cve-2021-20837-poc

  View on GitHub
  PoC for the CVE-2021-20837 : RCE in MovableType
  ☆18Oct 26, 2021Updated 4 years ago
• JeremyBlackthorne / PE-Runtime-Data-Structures

  View on GitHub
  ☆18Apr 4, 2019Updated 6 years ago
• g-les / floss2yar

  View on GitHub
  ☆15Sep 26, 2022Updated 3 years ago
• S4ntiagoP / donut

  View on GitHub
  Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…
  ☆114Oct 21, 2023Updated 2 years ago
• f3di006 / ReverseSocks5

  View on GitHub
  Reverse Socks5 proxy for windows
  ☆16Oct 13, 2022Updated 3 years ago
• send010 / SymbolTypeViewer_HanHua

  View on GitHub
  SymbolTypeViewer_汉化
  ☆17Sep 4, 2020Updated 5 years ago
• andreiverse / grc2

  View on GitHub
  grim reaper c2
  ☆346Nov 19, 2022Updated 3 years ago
• klezVirus / AIDA64DRIVER-EoP

  View on GitHub
  AIDA64DRIVER Elevation of Privilege Vulnerability
  ☆16Oct 25, 2024Updated last year
• mdsecactivebreach / morphHTA

  View on GitHub
  morphHTA - Morphing Cobalt Strike's evil.HTA
  ☆10Jun 3, 2017Updated 8 years ago
• mdsecactivebreach / firewalker

  View on GitHub
  ☆155Aug 17, 2020Updated 5 years ago
• jackson5sec / ShimDB

  View on GitHub
  Shim database persistence (Fin7 TTP)
  ☆37Feb 25, 2020Updated 6 years ago
• yhy0 / nucleiY

  View on GitHub
  承影用的 nuclei 漏扫模板
  ☆15Jun 11, 2023Updated 2 years ago