☆22Jun 24, 2025Updated last year
Alternatives and similar repositories for ShadowAdmin
Users that are interested in ShadowAdmin are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- Malleable C2 is a domain specific language to redefine indicators in Beacon's communication. This repository is a collection of Malleable…☆34Mar 28, 2026Updated 7 months ago
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- shell code example☆69Dec 12, 2025Updated 10 months ago
- Intel.AES-NI: Leveraging Intel AES-NI for AES-128 & AES-256 Encryption Modes☆27Jun 10, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆164Jun 12, 2025Updated last year
- A workshop about core UDRL mechanics by Joris Ignoul & Mickey De Baets☆24Jun 12, 2026Updated 4 months ago
- Enable or Disable TokenPrivilege(s)☆16May 17, 2024Updated 2 years ago
- Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.☆115Feb 25, 2025Updated last year
- BOF and research notes from hunting execution paths, covering Shell.HWEventHandlerShellExecute COM execution through the AutoPlay IHWEven…☆39Jun 20, 2026Updated 4 months ago
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆62May 12, 2025Updated last year
- A hacky way of getting cross-arch/platform support in Cobalt Strike☆38Aug 31, 2025Updated last year
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆217Feb 6, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- C++ Reflective Assembly Loader☆34Mar 7, 2025Updated last year
- rust port of pspy with support for process monitoring over dbus☆39Jan 4, 2026Updated 9 months ago
- A PoC for Early Cascade process injection technique.☆221Jan 30, 2025Updated last year
- ☆34Mar 19, 2025Updated last year
- Generate an Alphabetical Polymorphic Shellcode☆150Aug 19, 2025Updated last year
- ForsHops☆156Mar 25, 2025Updated last year
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆310Sep 23, 2025Updated last year
- Lateral movement with DCOM DLL hijacking☆185Jul 4, 2025Updated last year
- Execute shellcode via Bluetooth device authentication☆43Feb 19, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- MIPS VM to execute payloads without allocating executable memory. Based on a PlayStation 1 (PSX) Emulator.☆130Dec 6, 2024Updated last year
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆58Apr 14, 2025Updated last year
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆140Aug 31, 2025Updated last year
- open source implementation of the UDC2 spec used in Cobalt Strike☆60Jul 4, 2026Updated 3 months ago
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- A few BOF files to help facilitate reading and writing bytes to DLL function calls.☆12Jun 16, 2025Updated last year
- ☆29Oct 5, 2026Updated 3 weeks ago
- Recover NT hashes from NetNTLMv1 responses using local WebGPU computation and local/remote table lookup☆142Oct 7, 2026Updated 3 weeks ago
- A COFF Loader written in Rust☆144Oct 11, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An alternative to the builtin clipboard feature in Cobalt Strike that adds the capability to enable/disable and dump the clipboard histor…☆117Apr 16, 2026Updated 6 months ago
- A Mythic agent for Windows written in C☆187Aug 22, 2026Updated 2 months ago
- UAC Bypass using UIAccess program QuickAssist☆244Jul 19, 2026Updated 3 months ago
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago
- GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.☆12Nov 24, 2023Updated 2 years ago
- ☆37May 19, 2026Updated 5 months ago
- Hooking KPRCB IdlePreselect function to gain execution inside PID 0.☆81Apr 13, 2025Updated last year