Hunting and injecting RWX 'mockingjay' DLLs in pure nim
☆62Dec 11, 2024Updated last year
Alternatives and similar repositories for Shrike
Users that are interested in Shrike are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆76May 1, 2024Updated 2 years ago
- Shellcode Loader Utilizing ETW Events☆66Feb 26, 2025Updated last year
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
- ☆143Nov 17, 2025Updated 11 months ago
- Curated list of public Beacon Object Files(BOFs) build in as submodules for easy cloning☆140Jul 30, 2026Updated 3 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆105Oct 7, 2023Updated 3 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 4 years ago
- A BOF to enumerate system process, their protection levels, and more.☆125Nov 27, 2024Updated last year
- Dynamically resolve API function addresses at runtime in a secure manner.☆75Nov 11, 2025Updated 11 months ago
- SAM Dumping in C#☆56Nov 27, 2025Updated 11 months ago
- ☆138Dec 4, 2023Updated 2 years ago
- A cross-platform library for interacting with Windows through various protocols such as SMB, MSRPC, and LDAP/CLDAP written in Nim.☆17Jun 9, 2026Updated 4 months ago
- A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …☆194Apr 26, 2025Updated last year
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆245Feb 12, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Activation Context Hijack☆183May 4, 2026Updated 6 months ago
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆132Dec 6, 2024Updated last year
- Rust template/library for implementing your own COFF loader☆71Jan 27, 2025Updated last year
- ClickForClickOnce - Generate configurable clickonce payloads☆107Apr 17, 2026Updated 6 months ago
- Shellcode loader that executes embedded Lua from Rust.☆125Dec 16, 2024Updated last year
- Automated .NET AppDomain hijack payload generation☆129Feb 4, 2025Updated last year
- "Service-less" driver loading☆192Nov 28, 2024Updated last year
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- Host CLR and run .NET binaries using Rust☆156Dec 23, 2025Updated 10 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Havoc 3rd party agent. Designed to be evasive. Fully PIC shellcode agent.☆17Dec 29, 2022Updated 3 years ago
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆155Apr 18, 2025Updated last year
- Threadless shellcode injection tool☆68Aug 5, 2024Updated 2 years ago
- ☆38Apr 15, 2025Updated last year
- COM ViewLogger — new malware keylogging technique☆412Jan 6, 2025Updated last year
- ☆108Jan 21, 2025Updated last year
- Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence☆67Jun 23, 2025Updated last year
- Mentally ill EtwTi parser☆74Jan 11, 2026Updated 9 months ago
- Click Once + App Domain☆69Feb 23, 2026Updated 8 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread☆268Aug 31, 2025Updated last year
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆168Mar 26, 2025Updated last year
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆271Apr 8, 2025Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆195Nov 27, 2024Updated last year
- Mythic C2 Agent written in x64 PIC C☆85Jan 29, 2025Updated last year
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- ☆160Dec 13, 2024Updated last year