ShellCode 解释器 (样例)，无可执行权限加载 ShellCode (点点 Star，非常感谢!)
☆30Mar 7, 2025Updated last year
Alternatives and similar repositories for ShellCode-Interpreter
Users that are interested in ShellCode-Interpreter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- In-depth reverse engineering of a suspected LockBit affiliate dropper, documenting shellcode loading, import polymorphism, and payload de…☆16Jan 24, 2026Updated 9 months ago
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- 在线安软识别☆12Aug 6, 2025Updated last year
- ☆21Feb 27, 2022Updated 4 years ago
- A Windows C++ OLE/COM Object explorer written in WTL.☆17Feb 28, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- WebStrike 是一套以 Chromium 系浏览器扩展（Manifest V3） 为受控端点的指挥与控制（C2）套件。与传统以进程/驱动为主的 C2 相比，其工作重心落在 浏览器安全域：在合规授权与攻防演练场景下，可显著降低与终端 EDR 在 进程注入、驱动、内核回调…☆92Jul 8, 2026Updated 3 months ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆27Sep 8, 2021Updated 5 years ago
- Undocumented BindFlt user mode API.☆19Mar 7, 2025Updated last year
- Tool designed to parse and analyze Microsoft Defender AV signature definition files☆13Apr 12, 2026Updated 6 months ago
- Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. In C#, C++, Cryst…☆386Aug 31, 2026Updated last month
- Dynamic Function Resolution (DFR) definitions for Crystal Palace☆12Dec 19, 2025Updated 10 months ago
- ☆10Apr 26, 2024Updated 2 years ago
- 内存加载执行golang elf二进制文件☆29Dec 22, 2021Updated 4 years ago
- 滴水中级内核学习☆53Mar 12, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- PoC for covert persistence via Windows Push Task Scheduler (WPTaskScheduler) RPC interface — invisible to schtasks, Get-ScheduledTask, an…☆78Jun 15, 2026Updated 4 months ago
- Six-layer call-stack spoofing via .pdata lacunae — defeats ETW-Ti, kernel callbacks, CET shadow stack, and return-address validation in…☆199Jun 25, 2026Updated 4 months ago
- Rust 重构的 sRDI☆18Sep 9, 2024Updated 2 years ago
- 内网渗透、工具开发、二进制等相关笔记☆12Mar 26, 2023Updated 3 years ago
- A lightweight Windows Prefetch file parser to extract programs' execution history☆75Jan 12, 2026Updated 9 months ago
- 自定义函数堆栈，从而绕过ETW检测，这个是完整版。☆14Apr 15, 2024Updated 2 years ago
- A basic C2 framework written in C☆61Jul 7, 2024Updated 2 years ago
- Extracted lua script from Defender mpavbase.vdm and mpasbase.vdm☆16Jul 5, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- ☆72Jul 12, 2026Updated 3 months ago
- A simple parser(library) which extracts shimcache data from windows.☆15May 20, 2019Updated 7 years ago
- GateSentinel 是一个现代化的 C2 (Command and Control) 框架，专为安全研究和渗透测试设计。该项目采用 Go 语言开发服务端，C 语言开发客户端，提供了强大的远程控制和管理功能。☆288Jul 17, 2025Updated last year
- 关于RPC一些绕EDR的tips☆201Mar 3, 2023Updated 3 years ago
- 通过分析流量,快速检查手机是否被APT攻击☆36Oct 19, 2025Updated last year
- Reflective DLL that hooks the creation of the UAC prompt popped by explorer.exe for privilege escalation.☆20Feb 20, 2021Updated 5 years ago
- A C# tool with more flexibility to customize scheduled task for both persistence and lateral movement in red team operation☆18Dec 18, 2024Updated last year
- ☆19Jul 23, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 使用 rust 实现 CobaltStrike 的 beacon || Using Rust to implement CobaltStrike's Beacon☆206Jul 5, 2025Updated last year
- Simulate per-process disconnection in red team environments☆117Jun 6, 2025Updated last year
- Havoc BOF implementation of BYOVD attack to terminate PPL-protected EDR processes using a signed Microsoft kernel driver.☆42Apr 6, 2026Updated 6 months ago
- (This is a fork used primarily to submit patches into upstream repository) RpcView is a free tool to explore and decompile Microsoft RPC …☆18May 27, 2023Updated 3 years ago
- A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++☆283Sep 11, 2026Updated last month
- Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术，不使用API进行主线程劫持，不使用PEB…☆94Jul 26, 2025Updated last year
- 记录一些漏洞驱动，主要是学习Windows Kernel☆12Jan 7, 2026Updated 9 months ago