Remap ntdll.dll using only NTAPI functions with a suspended process
☆28Apr 13, 2025Updated last year
Alternatives and similar repositories for NativeNtdllRemap
Users that are interested in NativeNtdllRemap are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Impersonate Tokens using only NTAPI functions☆83Apr 4, 2025Updated last year
- Vulnerable (on purpose) programs to leak NtReadVirtualMemory address for stealthier API resolution (no GetProcAddress, GetModuleHandle or…☆42Dec 22, 2025Updated 9 months ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆83Jun 21, 2025Updated last year
- Repository to gather the BOF files I will be developing☆12Oct 1, 2024Updated last year
- Listener that spawns a new tmux window for each incoming reverse shell + Supports listening on many ports☆59Jul 13, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A tool to analyze Ntds.dit files once the NTLM and LM hashes have been cracked.☆16May 13, 2021Updated 5 years ago
- Repository to gather the .NET malware I will be developing☆20Mar 7, 2026Updated 6 months ago
- An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations☆63Aug 18, 2025Updated last year
- Cheatsheet for Altered Security's CESP ADCS course☆19Nov 15, 2023Updated 2 years ago
- tool for enumeration & bulk download of sensitive files found in SharePoint environments☆89Apr 2, 2025Updated last year
- Script to extract the cached credentials from SSSD, getting Active Directory credentials from Unix systems☆27Jun 14, 2023Updated 3 years ago
- Obfuscate payloads using IPv4, IPv6, MAC or UUID strings☆25Feb 17, 2024Updated 2 years ago
- The SecurityTube Linux Assembly Expert (SLAE) is an online course and certification which focuses on teaching the basics of 32-bit assemb…☆22Mar 31, 2019Updated 7 years ago
- Groovy Post Exploitation☆19Oct 21, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Modern PIC implant for Windows (64 & 32 bit)☆104Jul 23, 2025Updated last year
- PoC to self-delete a binary in C#☆36Feb 6, 2024Updated 2 years ago
- P/Invoke definitions from the most-of-the-time offline offline pinvoke.net. Website: https://ricardojoserf.gitbook.io/pinvoke☆24Mar 23, 2025Updated last year
- Minimalistic HTTP(S) client for the NT kernel☆60Dec 1, 2025Updated 9 months ago
- Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11☆86Jan 26, 2026Updated 8 months ago
- It’s just a reflektor☆32Sep 8, 2026Updated 2 weeks ago
- Scripts that automate portions of pentests.☆60Sep 2, 2026Updated 3 weeks ago
- Downloading Spotify Playlists☆29Sep 18, 2026Updated last week
- Periodically check hashcat cracking progress and notify of success.☆10Dec 18, 2018Updated 7 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- C# loader capable of running stage-1 from remote url, file path as well as file share☆15Feb 8, 2023Updated 3 years ago
- Multithreaded C# .NET Assembly to enumerate accessible network shares in a domain☆34Nov 13, 2023Updated 2 years ago
- Exfiltrate files using the HTTP protocol version ("HTTP/1.0" is a 0 and "HTTP/1.1" is a 1)☆24Oct 23, 2021Updated 4 years ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆109Nov 7, 2025Updated 10 months ago
- Intel 64/Windows low-level experiments☆118Sep 16, 2026Updated last week
- LibPicoManager is a unified PICO management framework that provides centralized control over PICOs in memory, enabling dynamic code loadi…☆42Dec 1, 2025Updated 9 months ago
- ☆16Aug 22, 2022Updated 4 years ago
- Active Directory Password Spray Testing Utility in Go☆18Mar 22, 2024Updated 2 years ago
- Simple powershell script to tests for "GHOST" SPN's☆17Oct 16, 2025Updated 11 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A flexible tool that creates a minidump of the LSASS process☆13Jan 18, 2022Updated 4 years ago
- A Windows tool that converts LDIF files to BloodHound CE☆31Dec 20, 2025Updated 9 months ago
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆174May 30, 2024Updated 2 years ago
- ☆84May 19, 2024Updated 2 years ago
- Cobalt Strike BOF for evasive .NET assembly execution☆328Mar 31, 2025Updated last year
- ☆19Sep 17, 2025Updated last year
- Code used in this post https://captmeelo.com/redteam/maldev/2022/04/21/kernelcallbacktable-injection.html☆163Apr 21, 2022Updated 4 years ago