Just another casual shellcode native loader
☆24Feb 3, 2022Updated 4 years ago
Alternatives and similar repositories for RTImplant
Users that are interested in RTImplant are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- UUID based Shellcode loader for your favorite C2☆86Dec 8, 2021Updated 4 years ago
- One gate to all syscalls!☆23Mar 12, 2022Updated 4 years ago
- 反射dll注入小案例☆12Feb 15, 2022Updated 4 years ago
- FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads☆382Apr 16, 2022Updated 4 years ago
- 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.☆12Sep 30, 2026Updated last month
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- A PoC project for embedding shellcode to Hint/Name Table☆113Apr 4, 2026Updated 7 months ago
- Assembly HellGate implementation that directly calls Windows System Calls and displays the PPID of the explorer.exe process☆106Mar 8, 2023Updated 3 years ago
- Collection of CobaltStrike beacon object files☆105Feb 14, 2022Updated 4 years ago
- JALSI - Just Another Lame Shellcode Injector☆30Aug 1, 2021Updated 5 years ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Nov 17, 2019Updated 6 years ago
- NimicStack is the pure Nim implementation of Call Stack Spoofing technique to mimic legitimate programs☆97Apr 4, 2026Updated 7 months ago
- A C port of b33f's UrbanBishop☆38Oct 1, 2020Updated 6 years ago
- Collection of shellcode injection and execution techniques☆17Mar 17, 2026Updated 7 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Get your data from the resource section manually, with no need for windows apis☆66Oct 22, 2024Updated 2 years ago
- A compilation of Aggressor/Sleep scripts for operational purposes that I've made.☆11Sep 17, 2021Updated 5 years ago
- Attack chain emulator. Write recipes for initial access easily☆24Feb 26, 2025Updated last year
- R3劫持所有异常☆14Jan 4, 2021Updated 5 years ago
- .NET Assembly to Retrieve Outlook Calendar Details☆13Oct 7, 2021Updated 5 years ago
- Inject a shellcode in a remote process using Process Hollowing.☆52Sep 18, 2021Updated 5 years ago
- It stinks☆101Apr 22, 2022Updated 4 years ago
- A small POC to make defender useless by removing its token privileges and lowering the token integrity☆690Jun 28, 2022Updated 4 years ago
- Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.☆17Jan 21, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆138Dec 4, 2023Updated 2 years ago
- Repository contains shellcodes made from scratch for intel x86-64 bit Architecture☆12May 6, 2023Updated 3 years ago
- ☆209Mar 22, 2021Updated 5 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- Encrypted Shellcode Loader Generator☆22Jan 29, 2019Updated 7 years ago
- Beacon Object Files (not Buffer Overflows)☆58Mar 6, 2023Updated 3 years ago
- Halos Gate-based NTAPI Unhooker☆50Apr 21, 2022Updated 4 years ago
- ☆30Nov 7, 2022Updated 4 years ago
- Reverse TCP Powershell has never been this paranoid. (basically an Opsec-safe reverse powershell)☆30Feb 4, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of alm…☆106Feb 14, 2023Updated 3 years ago
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- Experiments on the Windows Internals☆30Sep 22, 2019Updated 7 years ago
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆18Oct 19, 2025Updated last year
- Cobalt Strike BOF to list Windows Pipes & return their Owners & DACL Permissions☆96Mar 8, 2023Updated 3 years ago
- Execute PowerShell code at the antimalware-light protection level.☆144Sep 11, 2026Updated 2 months ago
- A simple COM server which provides a component to run shellcode☆143May 12, 2020Updated 6 years ago
Are these results useful?