Self-cleaning in-memory PICO loader for Crystal Palace. Automatically erases traces and operates entirely in memory for stealthy payload execution.
☆52Nov 2, 2025Updated 5 months ago
Alternatives and similar repositories for Self-Cleaning-PICO-Loader
Users that are interested in Self-Cleaning-PICO-Loader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- adws enumeration bof☆170Feb 16, 2026Updated last month
- ☆66Dec 19, 2024Updated last year
- One WSL BOF to rule them all☆174Jan 14, 2026Updated 3 months ago
- A Windows tool that converts LDIF files to BloodHound CE☆31Dec 20, 2025Updated 3 months ago
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆40Aug 5, 2025Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆18Jun 26, 2025Updated 9 months ago
- Reports on Driver, LSASS and other security services mitigations☆34Aug 18, 2025Updated 7 months ago
- ☆102Oct 7, 2023Updated 2 years ago
- Reflective shellcode loaderwith advanced call stack spoofing and .NET support.☆232Sep 19, 2025Updated 6 months ago
- CVE-2025-59501 POC code☆26Nov 20, 2025Updated 4 months ago
- LibWinHttp is a simplified WinHTTP wrapper designed as a Crystal Palace shared library for implant development. Its primary purpose is to…☆40Nov 4, 2025Updated 5 months ago
- PowerShell implementation for AD CS☆117Mar 2, 2026Updated last month
- A different approach to writing BOFs in rust.☆20Aug 20, 2025Updated 7 months ago
- User-Defined C2 BOF Template☆31Nov 24, 2025Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆18Mar 19, 2025Updated last year
- List web account manager (WAM) accounts added to the current profile☆25Dec 11, 2025Updated 4 months ago
- ☆26Aug 5, 2025Updated 8 months ago
- a BOF implementation of various registry persistence methods☆97Nov 11, 2025Updated 5 months ago
- BOF to terminate a process via PID as argument☆28Sep 7, 2025Updated 7 months ago
- Novel Windows process injection: assembles existing open handles (process & thread), natural RWX regions, and special user APC (NtQueueAp…☆69Feb 17, 2026Updated last month
- Ludus roles to deploy ASR rules and MDI auditing settings☆24Aug 5, 2025Updated 8 months ago
- Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames☆154Nov 23, 2025Updated 4 months ago
- ☆54Oct 13, 2025Updated 6 months ago
- Deploy open-source AI quickly and easily - Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Beacon Object File (BOF) to obtain Entra tokens via authcode flow.☆128Jan 17, 2026Updated 2 months ago
- ☆20Sep 6, 2025Updated 7 months ago
- Submission, compilation and execution of C# code snippets, using an unmanaged CLR Host☆59Jan 29, 2015Updated 11 years ago
- IronPE is a Windows PE manual loader written in Rust for both x86 and x64 PE files.☆113Mar 10, 2026Updated last month
- ☆21Feb 22, 2025Updated last year
- BOF template with boflink and mutator kit support☆49Jan 8, 2026Updated 3 months ago
- Show the time in Roman Numerals☆11Jan 23, 2020Updated 6 years ago
- Persistence via Shell Extensions☆64Aug 4, 2023Updated 2 years ago
- Stack Spoofing with Synthetic frames based on the work of namazso, SilentMoonWalk, and VulcanRaven☆267Oct 16, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆38Dec 4, 2025Updated 4 months ago
- Red Team Coin for crypto-mining operations.☆23Mar 1, 2026Updated last month
- Waiting Thread Hijacking - injection by overwriting the return address of a waiting thread☆264Aug 31, 2025Updated 7 months ago
- ☆127Dec 12, 2025Updated 4 months ago
- Generate AES128/256 Kerberos keys for an AD account using a plaintext password and Python3☆80Jun 1, 2022Updated 3 years ago
- A PoC for adding NtContinue to CFG allowed list in order to make Ekko work in a CFG protected process☆115Aug 29, 2022Updated 3 years ago
- Cobalt Strike BOF for evasive .NET assembly execution☆313Mar 31, 2025Updated last year