Evasive shellcode loader for Red Teaming
☆20Aug 15, 2025Updated last year
Alternatives and similar repositories for KhimairaLdr
Users that are interested in KhimairaLdr are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evasion kit for Cobalt Strike☆16Aug 13, 2026Updated 2 months ago
- sigreturn-oriented(SROP) based sleep obfuscation poc for Linux☆70Dec 15, 2025Updated 10 months ago
- A Position Independent Code (PIC) implementation of the execute-assembly command built with Crystal Palace.☆21Oct 4, 2026Updated 3 weeks ago
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆114May 25, 2026Updated 5 months ago
- Gradually raise the temp of emails/domains!☆13Jul 10, 2026Updated 3 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- some research on EDR deconditioning☆16Jun 4, 2026Updated 4 months ago
- Pure-Go offensive-security primitives library: syscalls, evasion (AMSI/ETW/unhook/sleepmask), injection, PE packer, credentials, post-ex,…☆27Jul 13, 2026Updated 3 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆50Dec 4, 2023Updated 2 years ago
- Blind AV solutions by setting firewall rules to block outgoing connections☆16Jun 9, 2024Updated 2 years ago
- ☆22Jun 28, 2026Updated 4 months ago
- Vulnerable kernel drivers to kill EDR☆18Aug 11, 2025Updated last year
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- multi layer encryption for payloads with options of delivery welcome to the Tenebris side☆27May 9, 2026Updated 5 months ago
- ☆17Sep 21, 2026Updated last month
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Mythic C2 MSTeams Communication Channel☆39Sep 13, 2026Updated last month
- Parse user-mode minidump files generated on Windows☆17Nov 17, 2025Updated 11 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆60Jul 4, 2026Updated 3 months ago
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated last year
- Dumping LSA secrets: a story about task decorrelation☆15Jul 9, 2024Updated 2 years ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆72Jul 12, 2026Updated 3 months ago
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 6 months ago
- Application-scoped Windows network brownouts in native C and BOF form☆22Aug 18, 2026Updated 2 months ago
- Next Generation of DripLoader with Indirect Syscalls and .node Side-loading☆32Nov 17, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆49Dec 21, 2025Updated 10 months ago
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- ☆37Nov 8, 2024Updated last year
- 🥱😴🛌💤☆21Jun 21, 2026Updated 4 months ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆41May 22, 2026Updated 5 months ago
- Load various payload (DLL from memory, Exe, etc...) in a way to evade static analysis of Antivirus. It can fetch data from various method…☆22Jun 18, 2026Updated 4 months ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- ☆108Jan 21, 2025Updated last year
- Ported from [LACUNA Chain](https://github.com/MazX0p/LACUNA-Chain) by Mohamed Alzhrani (0xmaz). lacuna-rs is a reusable Rust crate that …☆21Oct 2, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Code execution/injection technique using DLL PEB module structure manipulation☆293Jun 4, 2025Updated last year
- Set of PoC to abuse Windows minifilters functionality☆111May 1, 2026Updated 5 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Updated this week
- ☆18Sep 1, 2025Updated last year
- Collection of various malware techniques aimed at Windows through MinGW☆16Aug 24, 2024Updated 2 years ago
- Sleep Obfuscation in Rust☆289Dec 1, 2025Updated 10 months ago
- A CET-compatible Windows x64 loader that produces fully backed call stacks through runtime function table manipulation, code cave injecti…☆134Sep 6, 2026Updated last month