Remap ntdll.dll using only NTAPI functions with a suspended process
☆27Apr 13, 2025Updated last year
Alternatives and similar repositories for NativeNtdllRemap
Users that are interested in NativeNtdllRemap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Impersonate Tokens using only NTAPI functions☆85Apr 4, 2025Updated last year
- Vulnerable (on purpose) programs to leak NtReadVirtualMemory address for stealthier API resolution (no GetProcAddress, GetModuleHandle or…☆42Dec 22, 2025Updated 7 months ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆83Jun 21, 2025Updated last year
- Repository to gather the BOF files I will be developing☆11Oct 1, 2024Updated last year
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆59Jul 13, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A tool to analyze Ntds.dit files once the NTLM and LM hashes have been cracked.☆16May 13, 2021Updated 5 years ago
- Repository to gather the .NET malware I will be developing☆20Mar 7, 2026Updated 4 months ago
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆63Aug 18, 2025Updated 11 months ago
- Cheatsheet for Altered Security's CESP ADCS course☆18Nov 15, 2023Updated 2 years ago
- tool for enumeration & bulk download of sensitive files found in SharePoint environments☆88Apr 2, 2025Updated last year
- Script to extract the cached credentials from SSSD, getting Active Directory credentials from Unix systems☆26Jun 14, 2023Updated 3 years ago
- Obfuscate payloads using IPv4, IPv6, MAC or UUID strings☆24Feb 17, 2024Updated 2 years ago
- The SecurityTube Linux Assembly Expert (SLAE) is an online course and certification which focuses on teaching the basics of 32-bit assemb…☆22Mar 31, 2019Updated 7 years ago
- Groovy Post Exploitation☆20Oct 21, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Modern PIC implant for Windows (64 & 32 bit)☆105Jul 23, 2025Updated last year
- PoC to self-delete a binary in C#☆36Feb 6, 2024Updated 2 years ago
- P/Invoke definitions from the most-of-the-time offline offline pinvoke.net. Website: https://ricardojoserf.gitbook.io/pinvoke☆24Mar 23, 2025Updated last year
- Minimalistic HTTP(S) client for the NT kernel☆61Dec 1, 2025Updated 7 months ago
- Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11☆84Jan 26, 2026Updated 6 months ago
- It’s just a reflektor☆15Feb 26, 2026Updated 5 months ago
- Scripts that automate portions of pentests.☆59Updated this week
- Downloading Spotify Playlists☆28Jul 12, 2026Updated 2 weeks ago
- Periodically check hashcat cracking progress and notify of success.☆10Dec 18, 2018Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- C# loader capable of running stage-1 from remote url, file path as well as file share☆15Feb 8, 2023Updated 3 years ago
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆34Nov 13, 2023Updated 2 years ago
- Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)☆24Oct 23, 2021Updated 4 years ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆110Nov 7, 2025Updated 8 months ago
- Intel 64/Windows low-level experiments☆106Jul 21, 2026Updated last week
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆43Dec 1, 2025Updated 7 months ago
- ☆16Aug 22, 2022Updated 3 years ago
- Active Directory Password Spray Testing Utility in Go☆18Mar 22, 2024Updated 2 years ago
- Simple powershell script to tests for "GHOST" SPN's☆17Oct 16, 2025Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A flexible tool that creates a minidump of the LSASS process☆15Jan 18, 2022Updated 4 years ago
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆175May 30, 2024Updated 2 years ago
- ☆84May 19, 2024Updated 2 years ago
- Cobalt Strike BOF for evasive .NET assembly execution☆322Mar 31, 2025Updated last year
- ☆19Sep 17, 2025Updated 10 months ago
- A Windows tool that converts LDIF files to BloodHound CE☆31Dec 20, 2025Updated 7 months ago
- Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html☆156Apr 21, 2022Updated 4 years ago