☆78Aug 1, 2023Updated 3 years ago
Alternatives and similar repositories for Night_Walker
Users that are interested in Night_Walker are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 2 years ago
- A VSCode devcontainer for development of COFF files with batteries included.☆49Jul 10, 2023Updated 3 years ago
- Click Once + App Domain☆69Feb 23, 2026Updated 6 months ago
- Lockless BOF☆79May 2, 2025Updated last year
- An improvement and a different approach to Mockingjay Self-Injection.☆35May 21, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆143Jun 21, 2023Updated 3 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆297Jul 15, 2023Updated 3 years ago
- C or BOF file to extract WebKit master key to decrypt user cookie☆213Apr 29, 2024Updated 2 years ago
- A care package of useful bofs for red team engagments☆53Dec 6, 2024Updated last year
- Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP☆132Aug 5, 2026Updated 3 weeks ago
- Use TpAllocWork, TpPostWork and TpReleaseWork to execute machine code☆24Mar 13, 2023Updated 3 years ago
- ☆19Dec 18, 2024Updated last year
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆808Jan 26, 2026Updated 7 months ago
- idk man this was the default github name☆34Apr 23, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆25Jul 5, 2023Updated 3 years ago
- A bunch of scripts and code i wrote.☆155Nov 7, 2024Updated last year
- A VSCode plugin to assist with BOF development.☆37Aug 14, 2024Updated 2 years ago
- ☆16Jan 9, 2025Updated last year
- Tools I use on red team engagements and more☆36Aug 12, 2026Updated 2 weeks ago
- ☆323Jun 28, 2023Updated 3 years ago
- A .NET implementation to dump SAM, SYSTEM, SECURITY registry hives from a remote host☆42Dec 8, 2023Updated 2 years ago
- ☆30Jul 26, 2024Updated 2 years ago
- Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.☆298Apr 6, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- yet another sleep encryption thing. also used the default github repo name for this one.☆68May 11, 2023Updated 3 years ago
- Basic implementation of Cobalt Strikes - User Defined Reflective Loader feature☆100Feb 28, 2023Updated 3 years ago
- ☆181Mar 27, 2023Updated 3 years ago
- ☆129Jun 28, 2023Updated 3 years ago
- An executable that simplifies adding the msds-AllowedToActOnBehalfOfOtherIdentity attribute for RBCD☆50Mar 10, 2025Updated last year
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆234Jul 25, 2023Updated 3 years ago
- ☆37Feb 11, 2023Updated 3 years ago
- ☆12Jul 2, 2023Updated 3 years ago
- Find DLLs with RWX section☆81Jul 3, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆202Dec 27, 2023Updated 2 years ago
- Run Cobalt Strike BOFs in Brute Ratel C4!☆90Apr 15, 2025Updated last year
- Self Delete DLL☆22Feb 15, 2024Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆160Nov 7, 2023Updated 2 years ago
- A beacon object file implementation of PoolParty Process Injection Technique.☆458Dec 21, 2023Updated 2 years ago
- CobaltStrike BOF to spawn Beacons using DLL Application Directory Hijacking☆287Jun 8, 2023Updated 3 years ago
- (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…☆139Mar 3, 2025Updated last year