senzee1984 / InflativeLoading
Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
☆266Updated 7 months ago
Related projects ⓘ
Alternatives and complementary repositories for InflativeLoading
- A beacon object file implementation of PoolParty Process Injection Technique.☆324Updated 11 months ago
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆285Updated 3 months ago
- Use hardware breakpoint to dynamically change SSN in run-time☆234Updated 7 months ago
- Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver☆241Updated 4 months ago
- Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.☆227Updated 5 months ago
- Evasive shellcode loader☆269Updated last month
- .NET assembly loader with patchless AMSI and ETW bypass☆278Updated last year
- Dump lsass using only NTAPIs running 3 programs to create 3 JSON and 1 ZIP file... and generate the MiniDump later!☆351Updated last month
- Credential Guard Bypass Via Patching Wdigest Memory☆310Updated last year
- A Tool that aims to evade av with binary padding☆135Updated 4 months ago
- Collection of UAC Bypass Techniques Weaponized as BOFs☆408Updated 9 months ago
- Collection of Beacon Object Files (BOF) for Cobalt Strike☆540Updated 4 months ago
- Execute shellcode files with rundll32☆184Updated 9 months ago
- Lateral Movement Using DCOM and DLL Hijacking☆281Updated last year
- Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime☆298Updated last year
- BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions☆269Updated 3 months ago
- Just a simple silly PoC demonstrating executable "exe" file that can be used like exe, dll or shellcode...☆151Updated 2 months ago
- Terminate AV/EDR Processes using kernel driver☆337Updated last year
- A Go implementation of Cobalt Strike style BOF/COFF loaders.☆179Updated 2 months ago
- Some POCs for my BYOVD research and find some vulnerable drivers☆126Updated 2 months ago
- Shaco is a linux agent for havoc☆144Updated last year
- Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution☆164Updated 8 months ago
- Bypassing UAC with SSPI Datagram Contexts☆412Updated last year
- A Beacon Object File (BOF) template for Visual Studio☆140Updated 3 months ago
- A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.☆473Updated last year
- ☆314Updated last year
- Process injection alternative☆301Updated 2 months ago