miunasu / NTR_loaderLinks
Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术,不使用API进行主线程劫持,不使用PEB获取ntdll和kernel32的地址。
☆92Updated 6 months ago
Alternatives and similar repositories for NTR_loader
Users that are interested in NTR_loader are comparing it to the libraries listed below
Sorting:
- 主要用于隐藏进程真实路径,进程带windows真签名☆119Updated last year
- 一种通过进程注入实现强制关闭部分杀软进程的方法(以360安全卫士和360杀毒为例)☆138Updated 2 years ago
- 重构Beacon☆164Updated last year
- Binary Hollowing☆94Updated last year
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆75Updated 11 months ago
- ☆47Updated last year
- Hidedump:a lsassdump tools that may bypass EDR☆51Updated last year
- A cross platform C2/post-exploitation framework☆55Updated 3 months ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆134Updated 3 years ago
- mssqlproxy python3.5+ 并修复bug☆65Updated 2 years ago
- 基于个人习惯使用C/C++的shellcode开发项目模板☆50Updated last year
- Shellcode Reductio Entropy Tools☆74Updated 2 years ago
- ☆49Updated 2 years ago
- more conveniently Visual-Studio-BOF-template☆75Updated 2 years ago
- 通过C/C++实现的 Windows RID Hijacking persistence technique (RID劫持 影子账户 账户克隆).☆88Updated 4 years ago
- NewCobaltstrikeTeamServer 是一个尝试用 Go 语言重写的 Cobalt Strike 服务端项目,目前正在开发中,一个学习的产物☆86Updated 5 months ago
- ☆27Updated 3 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆78Updated 2 years ago
- ☆36Updated 2 years ago
- ☆36Updated 11 months ago
- go实现的shellcode免杀加载器,实测时可过火绒,360。当前效果请自行评判。☆44Updated last year
- PE to shellcode☆28Updated last year
- 白文件patch☆26Updated last year
- This is a third party agent for Havoc C2 written in golang.☆58Updated 2 years ago
- 一个2020年练手的基于gin框架搞的在线免杀平台,支持后台管理,邀请码注册等☆39Updated last year
- File entropy calculator - Golang☆30Updated 2 years ago
- 利用EFSRPC协议批量探测出网☆67Updated 2 years ago
- Callback Function Loader Implemented in Go☆140Updated last year
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆73Updated 3 years ago
- impacket编程手册☆103Updated 2 years ago