☆80Aug 1, 2023Updated 3 years ago
Alternatives and similar repositories for Night_Walker
Users that are interested in Night_Walker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 3 years ago
- Click Once + App Domain☆69Feb 23, 2026Updated 8 months ago
- Lockless BOF☆79May 2, 2025Updated last year
- An improvement and a different approach to Mockingjay Self-Injection.☆34May 21, 2024Updated 2 years ago
- A VSCode devcontainer for development of COFF files with batteries included.☆49Jul 10, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- C or BOF file to extract WebKit master key to decrypt user cookie☆211Apr 29, 2024Updated 2 years ago
- ☆16Jan 9, 2025Updated last year
- A care package of useful bofs for red team engagments☆53Dec 6, 2024Updated last year
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆298Jul 15, 2023Updated 3 years ago
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆99Feb 28, 2023Updated 3 years ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆812Jan 26, 2026Updated 9 months ago
- Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP☆135Oct 19, 2026Updated last week
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- ☆30Jul 26, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A BOF to automate common persistence tasks for red teamers☆298Mar 7, 2023Updated 3 years ago
- Stealthier variation of Module Stomping and Module Overloading injection techniques that reduces memory IoCs. Implemented in Python ctype…☆137Sep 27, 2023Updated 3 years ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆236Jul 25, 2023Updated 3 years ago
- ☆180Mar 27, 2023Updated 3 years ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Jul 5, 2023Updated 3 years ago
- ☆15Aug 17, 2023Updated 3 years ago
- ☆142Jun 21, 2023Updated 3 years ago
- Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.☆309Apr 6, 2025Updated last year
- idk man this was the default github name☆33Apr 23, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A VSCode plugin to assist with BOF development.☆37Aug 14, 2024Updated 2 years ago
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆24Mar 13, 2023Updated 3 years ago
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆388Jul 30, 2024Updated 2 years ago
- ☆43Feb 18, 2025Updated last year
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆201Dec 27, 2023Updated 2 years ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆170Jan 4, 2024Updated 2 years ago
- ☆323Jun 28, 2023Updated 3 years ago
- You shall pass☆271Jul 16, 2022Updated 4 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆87Mar 19, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Get your data from the resource section manually, with no need for windows apis☆66Oct 22, 2024Updated 2 years ago
- Section-based payload obfuscation technique for x64☆62Aug 8, 2024Updated 2 years ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆714Sep 9, 2026Updated last month
- Encypting the Heap while sleeping by hooking and modifying Sleep with our own sleep that encrypts the heap☆247Aug 2, 2023Updated 3 years ago
- A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host☆43Dec 8, 2023Updated 2 years ago
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆374May 24, 2022Updated 4 years ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago