Reflective x64 Loader written in C/ASM
☆15Dec 2, 2025Updated 11 months ago
Alternatives and similar repositories for MochiLdr
Users that are interested in MochiLdr are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cloud dead-drop C2 framework — RSA-4096 + AES-256-GCM, 5 cloud providers, Rust-only agents, P2P mesh, persistence engine, credential harv…☆50Oct 27, 2026Updated 2 weeks ago
- manually mapping the dll image into the process, dividing the image into parts of 0x1000 bytes and writing them in random order, which co…☆11Jan 10, 2023Updated 3 years ago
- A C# PE loader for x64 and x86 PE files.☆57Mar 9, 2026Updated 8 months ago
- In-memory Encrypted Shellcode Execution Suite☆15Jan 26, 2026Updated 9 months ago
- Find Windows RWX Memory Regions depending on the memory space needed☆18Nov 26, 2023Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 7 months ago
- Collection of BOFs for Linux☆15Nov 2, 2026Updated last week
- Object File (BOF) that demonstrates privilege escalation through a misconfigured AlwaysInstallElevated policy.☆13Sep 17, 2026Updated last month
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- Windows Defender Manager is a tool that helps stop Windows Defender. It works with the Antimalware Service Executable of all versions of …☆46Jan 18, 2025Updated last year
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆32May 30, 2024Updated 2 years ago
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- Windows SSH Misconfiguration Discovery Tool - Map lateral movement paths through misconfigured SSH services in Active Directory environme…☆101May 11, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- open source implementation of the UDC2 spec used in Cobalt Strike☆62Jul 4, 2026Updated 4 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- Proxy function calls through the thread pool with ease☆32Feb 27, 2025Updated last year
- Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in sili…☆15Oct 14, 2026Updated 3 weeks ago
- Lab Work☆82Jun 29, 2026Updated 4 months ago
- A manual PE mapping implementation, aka reflective loader☆25Feb 28, 2026Updated 8 months ago
- ☆41Nov 25, 2025Updated 11 months ago
- This is a very simple BOF written for Cobalt Strike and other post exploitation frameworks that I reimplemented from one of my C++ tools.…☆15Dec 16, 2023Updated 2 years ago
- open-source pentest management built to be operated by an AI agent☆30Sep 1, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Takes a raw shellcode file (or a hex string) and produces a standalone .exe☆13May 29, 2026Updated 5 months ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆48Aug 20, 2026Updated 2 months ago
- ☆25Oct 27, 2026Updated 2 weeks ago
- A proof-of-concept to demonstrate randomized execution paths and their impact on call stack signatures — ideal for EDR testing, behavior-…☆24Jan 17, 2026Updated 9 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- List of tools to use in the Advance Red Team Operations course from White Knight Labs☆15Dec 22, 2024Updated last year
- Advanced OSINT tool for username reconnaissance across 90+ websites, using Python and Playwright for high accuracy.☆19Jun 21, 2025Updated last year
- Remote dynamic .NET obfuscator and AMSI/ETW patch tool for bypassing Defender☆36May 29, 2026Updated 5 months ago
- PoC for a Havoc agent/handler setup with all C2 traffic routed through GitHub. No direct connections: all commands and responses are rela…☆48Jul 9, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A Windows rootkit that turns user-land processes into Protected Processes☆30Nov 16, 2024Updated last year
- Proxll is a tool designed to simplify the generation of proxy DLLs while addressing common conflicts related to windows.h☆41Oct 8, 2024Updated 2 years ago
- A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall☆41Oct 17, 2026Updated 3 weeks ago
- ☆32Apr 2, 2026Updated 7 months ago
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆71Oct 7, 2026Updated last month
- Windows named pipe hooking toolkit☆46Mar 20, 2026Updated 7 months ago
- Runpe + DInvoke + Syscall☆19Jun 18, 2021Updated 5 years ago
Are these results useful?