ntdll0 / HVNCLinks
My POC implementation of HVNC (Hidden VNC / Hidden Desktop)
☆28Updated last year
Alternatives and similar repositories for HVNC
Users that are interested in HVNC are comparing it to the libraries listed below
Sorting:
- Yandex browser passwords and credit-cards decryption algorithm☆22Updated 9 months ago
- A unique introduction to native runtime obfuscation.☆74Updated 10 months ago
- Troll TaskManager, and play with it .☆30Updated 5 months ago
- Decrypting yandex browser passwords☆27Updated 9 months ago
- Obfuscating function calls using Vectored Exception Handlers by redirecting execution through exception-based control flow. Uses byte swa…☆111Updated 3 months ago
- 🗡️ A multi-user malleable C2 framework targeting Windows. Written in C++ and Python☆45Updated last year
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆203Updated 5 months ago
- ☆60Updated last year
- Injecting DLL into LSASS at boot☆156Updated 9 months ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆72Updated last year
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆101Updated last year
- Shellcode loader☆100Updated last year
- Evade behavioral analysis by executing malicious code within trusted Microsoft call stacks, patchless hooking library IAT/EAT.☆128Updated last month
- Encode shellcode into dictionary words for evasion and entropy reduction☆40Updated last month
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆83Updated last year
- Educational proof-of-concept demonstrating DEP/NX bypass using hardware breakpoints, vectored exception handling, and instruction emulati…☆97Updated 3 months ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆103Updated 11 months ago
- TypeLib persistence technique☆139Updated last year
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆122Updated 2 months ago
- "Service-less" driver loading☆166Updated last year
- Malware?☆76Updated 3 months ago
- kernel-mode DLL Injector☆125Updated 9 months ago
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆166Updated last year
- A Free Open sourced crypter that builds a output .NET .exe Stub (Updated whenever I feel like it)☆20Updated 3 months ago
- A collection of position independent coding resources☆106Updated 2 months ago
- Modern security products (CrowdStrike, Bitdefender, SentinelOne, etc.) hook the nLoadImage function inside clr.dll to intercept and scan …☆199Updated last month
- Pattern-based AMSI bypass that patches AMSI.dll in memory by modifying comparison values, conditional jumps, and function prologues to ne…☆27Updated 8 months ago
- Generic PE loader for fast prototyping evasion techniques☆243Updated last year
- Dumping App Bound Protected Credentials & Cookies Without Privileges.☆166Updated 8 months ago
- Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks☆136Updated last year