Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx
☆16Apr 26, 2021Updated 5 years ago
Alternatives and similar repositories for Sigma
Users that are interested in Sigma are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Metamorphic Code Generator & Loader☆15Dec 7, 2020Updated 5 years ago
- Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets☆46Aug 4, 2021Updated 5 years ago
- Injects shellcode into remote processes using direct syscalls☆77Dec 30, 2020Updated 5 years ago
- SLib is a sandbox evasion library that implements some of the checks from https://evasions.checkpoint.com in C#☆66Aug 29, 2023Updated 3 years ago
- Aggressor script to integrate Phant0m with Cobalt Strike☆27Jun 8, 2017Updated 9 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆51Dec 11, 2019Updated 6 years ago
- Reverse Shell x86☆16Jan 6, 2019Updated 7 years ago
- C# project to create or modify existing LNKs☆55Oct 18, 2022Updated 4 years ago
- Loading and executing shellcode in C# without PInvoke.☆22Jan 10, 2022Updated 4 years ago
- An example of using Syscalls in C# to get a meterpreter shell.☆113Oct 7, 2021Updated 5 years ago
- Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler☆31Jul 12, 2021Updated 5 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆30Nov 9, 2021Updated 4 years ago
- NimReflectiveLoader is a Nim-based tool for in-memory DLL execution using Reflective DLL Loading.☆32Jan 21, 2024Updated 2 years ago
- A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows☆52Jun 14, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Utilizing hardware breakpoints to evade monitoring by Endpoint Detection and Response platforms☆138Dec 20, 2022Updated 3 years ago
- Rewrote HellsGate in C# for fun and learning☆85Feb 10, 2022Updated 4 years ago
- Remote Desktop Protocol .NET Console Application for Authenticated Command Execution☆12Apr 2, 2021Updated 5 years ago
- A C# Tool to gather information about email breaches☆17Dec 21, 2023Updated 2 years ago
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆77Feb 27, 2020Updated 6 years ago
- The Totally Legit Authentication Dialog☆12Sep 5, 2023Updated 3 years ago
- Trigen is a Python script which uses different combinations of Win32 function calls in generated VBA to execute shellcode.☆201Jul 2, 2017Updated 9 years ago
- Using "svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc" as trigger☆58Oct 7, 2020Updated 6 years ago
- C# loader that copies a chunk at the time of the shellcode in memory, rather that all at once☆22Jul 14, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆13Sep 22, 2019Updated 7 years ago
- Artemis - C++ Hell's Gate Syscall Implementation☆35Aug 16, 2023Updated 3 years ago
- HookDetection☆43Sep 3, 2021Updated 5 years ago
- A pure C version of SymProcAddress☆30Mar 17, 2024Updated 2 years ago
- Dynamically invoke arbitrary unmanaged code from managed code without P/Invoke.☆168Jan 25, 2024Updated 2 years ago
- Deobfuscation of XorStringsNet☆13Nov 5, 2024Updated last year
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆130Dec 6, 2024Updated last year
- Flexible C# shellcode runner☆40Jan 18, 2022Updated 4 years ago
- Post-exploitation tool for attacking Active Directory domain controllers☆18Dec 18, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- PoC for UUID shellcode execution using DInvoke☆156Mar 8, 2021Updated 5 years ago
- Spray a hash via smb to check for local administrator access☆143Feb 7, 2021Updated 5 years ago
- I used this to see if an EDR is running in Safe Mode☆33Feb 13, 2021Updated 5 years ago
- Automated (kinda) deployment of MalRDP infrastructure with Terraform & Ansible☆12Sep 15, 2023Updated 3 years ago
- This tool can decrypt encrypted resources from ConfuserEx and replace them☆13Aug 31, 2017Updated 9 years ago
- Cobalt Strike BOFS☆17Dec 20, 2023Updated 2 years ago
- ☆17Mar 26, 2024Updated 2 years ago