Golang PoC that sandboxes Defender (or other PPL) by setting its token integrity to Untrusted.
☆14May 28, 2025Updated last year
Alternatives and similar repositories for SandboxPPL
Users that are interested in SandboxPPL are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Freeze written in rust with APC shellcode injection. Shellcode is executed in signed Windows PE and its process gets unhooked using froze…☆10Jun 8, 2023Updated 3 years ago
- C# alternative to the linux "cat" command... Prints file contents to console. For use with Cobalt Strike's Execute-Assembly☆15Jul 15, 2021Updated 5 years ago
- converts sRDI compatible dlls to shellcode☆39Jan 20, 2025Updated last year
- ☆12Feb 23, 2015Updated 11 years ago
- MiniDump a process in memory with rust☆37Jun 20, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Lazy Programmer's Tips for Avoiding the SOC ~ BSides Belfast 2024☆17Sep 12, 2024Updated 2 years ago
- Aggressor Notification Scripts for cobaltstrike via slack & discord☆15Nov 27, 2025Updated 11 months ago
- Dump Lsass Memory Using a Reflective Dll☆14Feb 4, 2022Updated 4 years ago
- Some scripts to support with importing large datasets into BloodHound☆80Nov 28, 2023Updated 2 years ago
- Collection of Aggressor scripts for Cobalt Strike 3.0+ pulled from multiple sources☆13Jun 24, 2018Updated 8 years ago
- Tool to aid in dumping LSASS process remotely☆43Sep 23, 2025Updated last year
- 一款linux下的安全产品目的是满足个人安全需求有SSH爆破防护和SYN攻击扫描防护功能,基于netfilter,☆23Dec 2, 2023Updated 2 years ago
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆234Oct 18, 2022Updated 4 years ago
- Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.☆19Jun 12, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆129Jun 28, 2023Updated 3 years ago
- ☆49May 12, 2021Updated 5 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- Using call gadgets to break the call stack signature used by Elastic on proxying a module load. Provided as a Crystal Palace shared libra…☆89Nov 6, 2025Updated 11 months ago
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆92May 24, 2025Updated last year
- Ntdll Unhooking POC☆18Aug 12, 2022Updated 4 years ago
- ☆32Jun 22, 2022Updated 4 years ago
- ScareCrow loader binary source which easier to read and learn☆25Apr 14, 2022Updated 4 years ago
- RunPE adapted for x64 and written in C, does not use RWX☆28May 18, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- bring your own clean ntdll (or other MS dlls)☆29Jul 14, 2025Updated last year
- Research into COM☆19Jan 25, 2020Updated 6 years ago
- Windows下进程保护项目，包含应用层和驱动层自保☆10Dec 8, 2021Updated 4 years ago
- BOF/COFF obj file to PIC(shellcode). by golang☆40Sep 28, 2022Updated 4 years ago
- Terminate AV/EDR Processes using kernel driver☆354Jun 12, 2023Updated 3 years ago
- ☆24Feb 1, 2025Updated last year
- Nemesis agent for Mythic☆29Dec 11, 2025Updated 10 months ago
- RDP Checker☆66Feb 23, 2024Updated 2 years ago
- A library to make HTTP requests with the Windows winhttp API☆25Oct 4, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Windows Remote Administration Tool in Visual Basic with UNC paths☆22Apr 19, 2019Updated 7 years ago
- Demo of process injection, using Nt, direct syscall, etc.☆26Sep 29, 2021Updated 5 years ago
- my learning case about windows☆21Feb 4, 2022Updated 4 years ago
- ☆23Mar 9, 2022Updated 4 years ago
- An implementation and proof-of-concept of Process Forking.☆228Nov 29, 2021Updated 4 years ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆111Nov 7, 2025Updated 11 months ago
- Tool to perform lateral movement between AAD joined devices☆67Jun 8, 2022Updated 4 years ago