oldboy21 / JayFinder
Find DLLs with RWX section
☆78Updated last year
Alternatives and similar repositories for JayFinder:
Users that are interested in JayFinder are comparing it to the libraries listed below
- Simple BOF to read the protection level of a process☆115Updated last year
- ☆96Updated 2 months ago
- I have documented all of the AMSI patches that I learned till now☆74Updated last year
- Lateral Movement via the .NET Profiler☆80Updated 4 months ago
- ☆108Updated 4 months ago
- Embedder is a collection of sources in different languages to embed Python interpreter with minimal dependencies☆118Updated 9 months ago
- ☆121Updated last year
- ☆133Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated last year
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆91Updated 2 years ago
- Do some DLL SideLoading magic☆79Updated last year
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆39Updated last year
- ☆125Updated 6 months ago
- Create Anti-Copy DRM Malware☆54Updated 7 months ago
- Tool for playing with Windows Access Token manipulation.☆54Updated 2 years ago
- ☆98Updated last year
- ☆78Updated last year
- ☆61Updated 9 months ago
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆76Updated 7 months ago
- Construct the payload at runtime using an array of offsets☆63Updated 9 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆73Updated 7 months ago
- Identify and exploit leaked handles for local privilege escalation.☆106Updated last year
- Implant drop-in for EDR testing☆135Updated last year
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆78Updated last year
- Patch AMSI and ETW in remote process via direct syscall☆81Updated 2 years ago
- Find .net assemblies locally☆108Updated 2 years ago
- a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab☆62Updated 2 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆46Updated last year
- Malware?☆69Updated 5 months ago