Collection of reversed vulnerable drivers weaponized into process killers. PPL won't save you.
☆56Oct 18, 2026Updated this week
Alternatives and similar repositories for KillerLand
Users that are interested in KillerLand are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆44Updated this week
- A Position Independent Code (PIC) implementation of the execute-assembly command, using Crysta Palace linker.☆22Oct 4, 2026Updated 2 weeks ago
- A Windows process injection loader combining PPID spoofing, manual DLL mapping, module stomping, and direct NT syscall☆39Updated this week
- File hosting and scripted web delivery service extender for AdaptixC2. Host files over HTTP/HTTPS, generate one-liner payloads across 17 …☆36Aug 24, 2026Updated last month
- ☆14Oct 7, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Unofficial Ludus port of the SpecterOps K8s Workshop Lab☆14Sep 3, 2026Updated last month
- Process Explorer vulnerable driver PPL Bypass☆27Sep 30, 2026Updated 3 weeks ago
- Demonstration of the DLL party process injection technique☆89Oct 1, 2026Updated 2 weeks ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆60Updated this week
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆37Updated this week
- ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy…☆26Sep 25, 2026Updated 3 weeks ago
- A Bof to dump domain credentials via DRSGetNCChanges, Created for use with the Adaptix C2.☆15Dec 16, 2025Updated 10 months ago
- Modular User-Defined Reflective Loader (UDRL) built on Crystal Palace for controlled DLL execution and evasion research.☆39Apr 14, 2026Updated 6 months ago
- Crystal Palace Evasion kit for Sliver☆122Jun 13, 2026Updated 4 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 6 months ago
- Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma,…☆25Updated this week
- Another Injection Technique which eliminates creations of thread in remote process☆28Jul 7, 2026Updated 3 months ago
- a short script to make my life easy : ) nothing more☆13Jul 6, 2026Updated 3 months ago
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆64May 4, 2026Updated 5 months ago
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆26Updated this week
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- A small set of Beacon Object Files (BOFs) that I developed over the time with a Magic: The Gathering theme.☆22Jul 15, 2025Updated last year
- BYOVD tool for manipulating Windows Protected Process Light (PPL) protection at the kernel level.☆98May 25, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A collection of techniques for process injection on Windows☆104Aug 16, 2026Updated 2 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆71Jul 12, 2026Updated 3 months ago
- The swiss army knife of LSASS dumping☆14Jan 4, 2026Updated 9 months ago
- Custom Adaptix-compatible C2 agent - PIC beacon + Stardust UDRL + Go extender plugins☆146Oct 4, 2026Updated 2 weeks ago
- Adaptix C2 extender to support Cobalt Strike Malleable C2 profiles☆54Jun 28, 2026Updated 3 months ago
- Mythic C2 MSTeams Communication Channel☆38Sep 13, 2026Updated last month
- 🥱😴🛌💤☆21Jun 21, 2026Updated 4 months ago
- CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory☆27Jul 17, 2026Updated 3 months ago
- SilentChrome-BOF is a BOF (Beacon Object File) that silently installs a browser extension into Chrome or Edge by modifying the Preference…☆30Apr 3, 2026Updated 6 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AuthStrike is an identity and authentication security testing tool for controlled simulations, security research, and education purpose o…☆20Sep 9, 2026Updated last month
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆88Jul 20, 2026Updated 3 months ago
- open source implementation of the UDC2 spec used in Cobalt Strike☆61Jul 4, 2026Updated 3 months ago
- Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime☆107Mar 29, 2026Updated 6 months ago
- PIC shellcode agent based on Stardust framework and Crystal Palace☆91Oct 4, 2026Updated 2 weeks ago
- Patchless ETW & AMSI bypass POC reverse-engineered from Turla’s Kazuar v3 loader.☆24Jan 14, 2026Updated 9 months ago
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆75Oct 10, 2026Updated last week