ntdll0 / HVNCLinks
My POC implementation of HVNC (Hidden VNC / Hidden Desktop)
☆27Updated 8 months ago
Alternatives and similar repositories for HVNC
Users that are interested in HVNC are comparing it to the libraries listed below
Sorting:
- Yandex browser passwords and credit-cards decryption algorithm☆19Updated 5 months ago
- A unique introduction to native runtime obfuscation.☆65Updated 6 months ago
- Decrypting yandex browser passwords☆25Updated 5 months ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆91Updated last year
- EDR & AV Bypass Arsenal— a comprehensive collection of tools, patches, and techniques for evading modern EDR and antivirus defenses.☆20Updated last month
- Injecting DLL into LSASS at boot☆138Updated 4 months ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆73Updated last year
- Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…☆180Updated 2 years ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆99Updated 6 months ago
- "Service-less" driver loading☆161Updated 9 months ago
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆176Updated last month
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆163Updated last year
- kernel-mode DLL Injector☆110Updated 4 months ago
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆45Updated last year
- This is the loader that supports running a program with Protected Process Light (PPL) protection functionality.☆182Updated last week
- TypeLib persistence technique☆133Updated 10 months ago
- Classic Process Injection with Memory Evasion Techniques implemantation☆71Updated last year
- Encode shellcode into dictionary words for evasion and entropy reduction☆27Updated 10 months ago
- LKM rootkit for modern kernels, with DNS C2 and a simple web interface☆74Updated 2 months ago
- BOF with Synthetic Stackframe☆167Updated 6 months ago
- Splitting and executing shellcode across multiple pages☆101Updated 2 years ago
- ☆40Updated 9 months ago
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆27Updated last year
- Block any Process to open HANDLE to your process , only SYTEM is allowed to open handle to your process ,with that you can avoid remote m…☆172Updated 2 years ago
- Generic PE loader for fast prototyping evasion techniques☆235Updated last year
- Create a new thread that will suspend every thread and encrypt its stack, then going to sleep , then decrypt the stacks and resume thread…☆162Updated 2 years ago
- Malware?☆74Updated 11 months ago
- Shellcode loader☆94Updated 9 months ago
- CaveCarver - PE backdooring tool which utilizes and automates code cave technique☆230Updated 2 years ago
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆62Updated 3 months ago