miunasu / NTR_loaderLinks
Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术，不使用API进行主线程劫持，不使用PEB获取ntdll和kernel32的地址。
☆90Updated 5 months ago
Alternatives and similar repositories for NTR_loader
Users that are interested in NTR_loader are comparing it to the libraries listed below
Sorting:
- 一种通过进程注入实现强制关闭部分杀软进程的方法（以360安全卫士和360杀毒为例）☆137Updated 2 years ago
- 主要用于隐藏进程真实路径，进程带windows真签名☆118Updated last year
- Binary Hollowing☆90Updated last year
- ☆47Updated last year
- 重构Beacon☆164Updated last year
- 基于个人习惯使用C/C++的shellcode开发项目模板☆50Updated last year
- more conveniently Visual-Studio-BOF-template☆74Updated 2 years ago
- Hidedump:a lsassdump tools that may bypass EDR☆50Updated last year
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆75Updated 10 months ago
- A cross platform C2/post-exploitation framework☆55Updated 2 months ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆132Updated 3 years ago
- Shellcode Reductio Entropy Tools☆74Updated 2 years ago
- File entropy calculator - Golang☆30Updated last year
- ☆27Updated 3 years ago
- 白文件patch☆26Updated last year
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆78Updated 2 years ago
- ☆49Updated 2 years ago
- 通过C/C++实现的 Windows RID Hijacking persistence technique (RID劫持 影子账户 账户克隆).☆88Updated 4 years ago
- PE to shellcode☆28Updated last year
- NewCobaltstrikeTeamServer 是一个尝试用 Go 语言重写的 Cobalt Strike 服务端项目，目前正在开发中，一个学习的产物☆83Updated 5 months ago
- Get password/cookie/history from browser and use devtools protocol to bypass edr monitoring☆62Updated 8 months ago
- ☆36Updated 10 months ago
- mssqlproxy python3.5+ 并修复bug☆65Updated 2 years ago
- ☆36Updated 2 years ago
- 通过RPC创建计划任务☆28Updated 7 months ago
- 免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus☆73Updated 3 years ago
- 一个2020年练手的基于gin框架搞的在线免杀平台，支持后台管理，邀请码注册等☆39Updated last year
- go实现的shellcode免杀加载器，实测时可过火绒，360。当前效果请自行评判。☆44Updated last year
- XOR 加密 分离免杀☆67Updated 2 years ago
- 利用EFSRPC协议批量探测出网☆67Updated 2 years ago