A 64-bit ELF loader in C to avoid use of execve. Supports loading and executing statically linked non-PIE and PIE binaries on Linux.
☆21Jan 5, 2026Updated 9 months ago
Alternatives and similar repositories for elf-loader
Users that are interested in elf-loader are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Prime a process for injection when S1 is present☆13Feb 8, 2025Updated last year
- Proof-of-Concept exploit for CVE-2026-32223☆22Apr 17, 2026Updated 6 months ago
- low-level windows networking library using afd.sys sockets and schannel tls. bypasses winsock, winhttp, wininet and other high-level netw…☆18Jul 15, 2026Updated 3 months ago
- Beacon Object File (BOF) Template☆99Oct 14, 2026Updated 2 weeks ago
- This is my implementation of IA32 Call Gates used for ring transitioning. (e.g ring 1 or ring 2)☆17Jan 15, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Loads a program into a memfd and runs it.☆11May 22, 2022Updated 4 years ago
- A Linux ELF Packer/Loader for EDR evasion☆60Sep 19, 2026Updated last month
- Disassemblers for ARM's AArch64 and AArch32 instruction sets☆22Oct 8, 2026Updated 3 weeks ago
- Busybox-style Beacon Object Files for *nix post-exploitation. Reimplements common Unix utilities as BOFs for use in stripped environments…☆83Aug 22, 2026Updated 2 months ago
- Parse user-mode minidump files generated on Windows☆17Nov 17, 2025Updated 11 months ago
- Really Simple Domain Generation Algorithm library☆10Oct 10, 2019Updated 7 years ago
- What's the Red Team doing to my Linux Box? - BSides Vienna 2024☆16Nov 23, 2024Updated last year
- A POC tool for exploring dev-tunnels☆72May 5, 2026Updated 5 months ago
- A request smuggling desync to global cache channel PoC to accompany paper on blog.malicious.group.☆15Jul 25, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 6 months ago
- A malware-analysis tool that identify the exact position and details of malicious content in binary files using external Anti-Virus scann…☆47Dec 26, 2023Updated 2 years ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆66Jun 15, 2026Updated 4 months ago
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆52Aug 10, 2026Updated 2 months ago
- ☆13Jan 21, 2019Updated 7 years ago
- DPAPI research and offensive tools☆17Feb 12, 2026Updated 8 months ago
- ☆17Jun 26, 2025Updated last year
- Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs☆22Aug 7, 2025Updated last year
- COM Windows Persistence Technique☆90Apr 27, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆20Jul 23, 2026Updated 3 months ago
- Anti-Debugging (Self-Debugging)☆17Sep 6, 2025Updated last year
- An example reference design for a proposed BOF PE☆251Jan 23, 2026Updated 9 months ago
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 10 months ago
- A collection of commands, tools, techniques and procedures of the purplestorm ctf team.☆14Mar 20, 2025Updated last year
- A simple file watcher for OpenBSD☆16Dec 17, 2024Updated last year
- Windows 32/64-bit Include files and Import Libraries☆16May 26, 2022Updated 4 years ago
- load arbitrary dlls, call any exported function, calls execute inside g0 as normal syscalls do from the traditional route, no syscall or …☆30May 4, 2026Updated 5 months ago
- This contains notes and code for my Troopers23 Beyond Java talk☆24Jun 30, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Nvidia GreenSection Memory Corruption 0day vulnerability☆17Aug 29, 2026Updated 2 months ago
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 8 months ago
- Projects I did during the reading of @zodiacon's Windows Kernel Programming book☆10Apr 9, 2021Updated 5 years ago
- Rusty DoublePulsar - Cobalt Strike User-Defined Reflective Loader (UDRL) in Rust (Codename: DoublePulsar)☆117May 14, 2026Updated 5 months ago
- BOF POC of the DSCourier project / invoking WinGet via COM☆90Apr 23, 2026Updated 6 months ago
- Vectored Exception Handling Squared☆35Dec 27, 2025Updated 10 months ago