A script to generate AV evaded(static) DLL shellcode loader with AES encryption.
☆143Mar 28, 2025Updated last year
Alternatives and similar repositories for ShellcodeEncrypt2DLL
Users that are interested in ShellcodeEncrypt2DLL are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Easy recon tool for OSCP and HTB☆10Aug 8, 2024Updated 2 years ago
- ☆56Oct 13, 2025Updated last year
- This is for Ethical Use only. The default automated binaries created are all burned. I have added the script to the repo to modify certai…☆453Sep 26, 2026Updated last month
- ☆12Nov 12, 2023Updated 2 years ago
- Payload Generation Workflow☆40Jul 18, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Command channel that uses Wi-Fi Beacons as a Bidirectional C2 transport☆46Mar 28, 2026Updated 7 months ago
- C++ Encrypted SSL/TLS REVERSE SHELL, designed to provide secure, encrypted communication between a compromised client and an attacker, wh…☆123Oct 9, 2025Updated last year
- Cobalt Strike BOF for evasive .NET assembly execution☆328Mar 31, 2025Updated last year
- Shellcode encryptor & obfuscator tool☆1,048Jul 21, 2026Updated 3 months ago
- ☆52Jun 12, 2026Updated 4 months ago
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and r…☆385Apr 26, 2025Updated last year
- Weaponizing DCOM for NTLM Authentication Coercions☆273Jul 1, 2025Updated last year
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆132Dec 7, 2025Updated 10 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …☆1,914Nov 3, 2024Updated last year
- The DCERPC only printerbug.py version☆234Oct 30, 2025Updated last year
- A PoC for Early Cascade process injection technique.☆221Jan 30, 2025Updated last year
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆397Dec 13, 2024Updated last year
- 🧙♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications☆1,371Mar 27, 2026Updated 7 months ago
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆155Apr 18, 2025Updated last year
- ☆247May 5, 2024Updated 2 years ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆139Jun 16, 2024Updated 2 years ago
- Active Directory share enumeration tool☆13Apr 28, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆92May 24, 2025Updated last year
- Stealthily inject shellcode into an executable☆485Oct 19, 2025Updated last year
- The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning☆165Aug 28, 2026Updated 2 months ago
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆170Jan 4, 2024Updated 2 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆35Nov 24, 2024Updated last year
- Extract and execute a PE embedded within a PNG file using an LNK file.☆484Nov 2, 2024Updated last year
- Extract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. In C#, C++, Cryst…☆387Aug 31, 2026Updated 2 months ago
- Cobalt Strike Aggressor Script for identifying security products on Windows hosts — six enumeration methods rated by noise level, from si…☆98Feb 6, 2026Updated 8 months ago
- Steal Net-NTLMv1 hashes for logged on users without dumping LSASS☆16May 11, 2026Updated 5 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆638Jun 25, 2024Updated 2 years ago
- ☆26Mar 23, 2026Updated 7 months ago
- RunAs Utility Credential Stealer implementing 3 techniques : Hooking CreateProcessWithLogonW, Smart Keylogging, Remote Debugging☆207Mar 6, 2025Updated last year
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆611Aug 17, 2026Updated 2 months ago
- ☆21Feb 27, 2022Updated 4 years ago
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- AV bypass while you sip your Chai!☆223May 17, 2024Updated 2 years ago