roadwy / SideloadFinderLinks
frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can later be weaponized during Red Team Operations to evade AV/EDR's.
☆53Updated 2 years ago
Alternatives and similar repositories for SideloadFinder
Users that are interested in SideloadFinder are comparing it to the libraries listed below
Sorting:
- Beacon compiled using clang☆72Updated 2 years ago
- Evasive loader to bypass static detection☆59Updated last year
- Self Cleanup in post-ex job☆58Updated last year
- Silently Install Chrome Extension For Persistence☆94Updated last year
- An implementation of an indirect system call☆131Updated 2 years ago
- load assembly executable file in memory☆41Updated 2 years ago
- Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.☆62Updated 2 years ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆65Updated last month
- Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…☆78Updated last year
- CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback☆68Updated 3 years ago
- ☆43Updated 2 years ago
- vehsyscall:a syscall project that may bypass EDR☆60Updated last year
- use aswArPot.sys to kill process☆68Updated 3 years ago
- ☆28Updated 2 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆142Updated 3 years ago
- ReturnGate, just like HellsGate.☆68Updated 3 years ago
- ☆41Updated 2 years ago
- A SigFlip implement in golang☆51Updated 3 years ago
- Its a coff loader ported to go( Modified by TimWhite )☆27Updated 2 years ago
- (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll☆44Updated 3 years ago
- Fork & modify of Wireguard's Memmod☆33Updated 2 years ago
- ☆60Updated last year
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆57Updated 2 years ago
- Golang implementation of Reflective load PE from memory☆62Updated 3 years ago
- A BOF/COFF loader implemented in Go and CGO.☆22Updated last year
- Use COM Component Bypass UAC,Dll Version☆36Updated 4 years ago
- Alternative Shellcode Execution Via Callbacks Rewrite In C#☆89Updated 2 years ago
- A Simple PoC☆21Updated last year
- kill AV/EDR☆22Updated 2 years ago
- ☆92Updated 4 years ago