C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
☆30Nov 9, 2021Updated 4 years ago
Alternatives and similar repositories for DoublePulsarPayload
Users that are interested in DoublePulsarPayload are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- Loads shellcode from a resource file.☆21Aug 15, 2019Updated 7 years ago
- Simple Aggressor Scripts for Cobalt Strike☆13Sep 24, 2020Updated 6 years ago
- Headers for linking your software with ntdll.dll☆15Nov 4, 2020Updated 5 years ago
- ☆51Sep 18, 2020Updated 6 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- RunPE using Hell's Gate technique.☆31Dec 4, 2020Updated 5 years ago
- A C port of b33f's UrbanBishop☆38Oct 1, 2020Updated 6 years ago
- Library for using direct system calls☆35Jan 30, 2025Updated last year
- ☆38Oct 12, 2020Updated 6 years ago
- Simple remote administration tool. Written in c++ and MASM.☆18May 16, 2018Updated 8 years ago
- Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx☆16Apr 26, 2021Updated 5 years ago
- BlowBeef is a tool for analyzing WMI data.☆18Jul 26, 2021Updated 5 years ago
- Create a Run registry key with direct system calls. Inspired by @Cneelis's Dumpert and SharpHide.☆77Feb 27, 2020Updated 6 years ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆35Sep 15, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A simple C implementation to decoded your shellcode and writes it directly to memory☆97Jul 10, 2020Updated 6 years ago
- Misc Windows Driver/Kernel PoCs that do not need a separate repo.☆14May 4, 2025Updated last year
- Halos Gate implementation in C++☆14May 19, 2023Updated 3 years ago
- Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses☆38Dec 9, 2020Updated 5 years ago
- Bypass UAC by abusing the Security Center CPL and hijacking a shell protocol handler☆31Jul 12, 2021Updated 5 years ago
- ☆13Apr 23, 2019Updated 7 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆41Sep 23, 2021Updated 5 years ago
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Aug 29, 2021Updated 5 years ago
- A simple dumper as FreshyCalls' PoC. That's what's trendy, isn't it? ¯\_(ツ)_/¯☆37Dec 13, 2020Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AMSI Bypass Via the Heap☆106Nov 20, 2020Updated 5 years ago
- Get/dump chrome and firefox saved passwords.☆19Sep 13, 2020Updated 6 years ago
- BOF/COFF obj file to PIC(shellcode). by golang☆40Sep 28, 2022Updated 4 years ago
- EQGRP: Replicating DarkPulsar, an DLL capable of hooking Security Package Method Tables on the Heap!☆15Oct 11, 2020Updated 6 years ago
- My experience using Windows API for offensive purposes☆17Jul 10, 2021Updated 5 years ago
- Titan: A generic user defined reflective DLL for Cobalt Strike☆84Nov 20, 2022Updated 3 years ago
- Simple shellcode obfuscator using PYTHON and C / C++☆75Jun 17, 2020Updated 6 years ago
- Windows PE - TLS (Thread Local Storage) Injector in C/C++☆108Jan 3, 2021Updated 5 years ago
- ☆15Feb 29, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Example code for using named pipe output with beacon ReflectiveDLLs☆118Jun 24, 2020Updated 6 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.☆40Dec 31, 2020Updated 5 years ago
- credential dump using foreshaw technique using SeTrustedCredmanAccessPrivilege☆125May 22, 2021Updated 5 years ago
- Hijack NotifyRoutine for a kernelmode thread☆39Jun 4, 2022Updated 4 years ago
- A PoC designed to bypass all usermode hooks in a WoW64 environment.☆145Sep 16, 2020Updated 6 years ago
- A quick tool for hiding a new process running shellcode.☆57Jun 10, 2020Updated 6 years ago