melotic / nanostorm
An (WIP) EDR Evasion tool for x64 Windows & Linux binaries that utilizes Nanomites, written in Rust.
☆16Updated last month
Alternatives and similar repositories for nanostorm:
Users that are interested in nanostorm are comparing it to the libraries listed below
- example using NtCreateUserProcess in rust☆17Updated last month
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆27Updated 3 years ago
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆17Updated last year
- Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.☆14Updated 10 months ago
- A work in progress BOF/COFF loader in Rust☆46Updated last year
- A COFF Loader written in Rust☆43Updated this week
- Load a dynamic library from memory using a fuse mount☆30Updated last year
- DoublePulsar (Position-Independent) Shellcode (Windows 7 SP1 x64)☆26Updated 4 years ago
- A lexer and parser for Sleep☆15Updated this week
- Load and execute a common object file format (COFF) in the current process☆26Updated 10 months ago
- Example of using Sleep to create better named pipes.☆41Updated last year
- A small example of loading BOFs in Python with pure reflection☆17Updated last year
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆12Updated last year
- Miscellaneous examples for use with Cobalt Strike Beacon☆10Updated 4 years ago
- ☆16Updated 5 months ago
- ☆46Updated 3 years ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆46Updated 3 months ago
- Cobalt Strike notifications via NTFY.☆13Updated 3 months ago
- Hooked create process injection for meterpreter☆23Updated 3 years ago
- A simple rpc2socks alternative in pure Go.☆26Updated 6 months ago
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆13Updated last year
- Donut generator in rust.☆25Updated 2 years ago
- convert compatible dlls to shellcode with sRDI. I don't remember where this came from, so if you recognize the code, let me know and I'll…☆12Updated 8 months ago
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆30Updated 10 months ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated last year
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆32Updated 2 years ago
- string encryption in Nim☆17Updated 7 months ago
- ☆15Updated last year
- ☆19Updated 7 months ago
- ☆42Updated last year