pard0p / Self-Cleaning-PICO-LoaderLinks
Self-cleaning in-memory PICO loader for Crystal Palace. Automatically erases traces and operates entirely in memory for stealthy payload execution.
☆44Updated last week
Alternatives and similar repositories for Self-Cleaning-PICO-Loader
Users that are interested in Self-Cleaning-PICO-Loader are comparing it to the libraries listed below
Sorting:
- A bunch of shenanigans using functions, VEH and more☆37Updated 5 months ago
- ☆32Updated 9 months ago
- Arsenal of modules to beacon postex formats like BOF/Shellcode including: dotnet in memory execution, lateral moviment (scm, winrm, dcom,…☆64Updated 2 weeks ago
- Using LNK files and user input simulation to start processes under explorer.exe☆27Updated last year
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆76Updated 2 months ago
- Beacon Object File (BOF) for Using the BadSuccessor Technique for Account Takeover☆76Updated 3 weeks ago
- Cobalt Strike UDRL for memory scanner evasion.☆52Updated last year
- ☆50Updated 4 months ago
- EmbedExeLnk by x86matthew modified by d4rkiZ☆41Updated 2 years ago
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆33Updated 2 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆42Updated last year
- ☆22Updated 8 months ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆83Updated last year
- Rust implementation of phantom persistence technique documented in https://blog.phantomsec.tools/phantom-persistence☆58Updated 4 months ago
- A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader☆61Updated last year
- BOF for C2 framework☆44Updated last year
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆56Updated 7 months ago
- Beacon Debugger☆55Updated last year
- Less sugar (entropy) for your binaries☆33Updated 2 months ago
- early cascade injection PoC based on Outflanks blog post, in rust☆60Updated last year
- ☆100Updated 2 years ago
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆30Updated 9 months ago
- ☆33Updated 7 months ago
- ☆73Updated last year
- ☆43Updated 10 months ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆62Updated last year
- Extensible Position Independent Code – shellcode (C/C++) development and building toolkit designed for developer experience, predictabili…☆69Updated this week
- ☆37Updated 2 years ago
- Bypassing Amsi using LdrLoadDll☆47Updated 10 months ago
- A work in progress BOF/COFF loader in Rust☆50Updated 2 years ago