senzee1984 / InflativeLoadingLinks
Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
☆322Updated last year
Alternatives and similar repositories for InflativeLoading
Users that are interested in InflativeLoading are comparing it to the libraries listed below
Sorting:
- A beacon object file implementation of PoolParty Process Injection Technique.☆424Updated last year
- Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.☆279Updated 8 months ago
- Use hardware breakpoint to dynamically change SSN in run-time☆270Updated last year
- A Beacon Object File (BOF) template for Visual Studio☆252Updated last week
- .NET assembly loader with patchless AMSI and ETW bypass☆358Updated 2 years ago
- Bypassing UAC with SSPI Datagram Contexts☆457Updated 2 years ago
- Terminate AV/EDR Processes using kernel driver☆349Updated 2 years ago
- This is the tool to dump the LSASS process on modern Windows 11☆507Updated last month
- Execute shellcode files with rundll32☆211Updated last year
- Credential Guard Bypass Via Patching Wdigest Memory☆334Updated 2 years ago
- Execute shellcode from a remote-hosted bin file using Winhttp.☆239Updated 2 years ago
- A Visual Studio template used to create Cobalt Strike BOFs☆319Updated 4 years ago
- ☆338Updated 3 weeks ago
- A simple Sleepmask BOF example☆157Updated last week
- ☆234Updated 2 years ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆261Updated 2 years ago
- Cobalt Strike BOF for evasive .NET assembly execution☆284Updated 8 months ago
- Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime☆311Updated 2 years ago
- DCOM Lateral movement POC abusing the IMsiServer interface - uploads and executes a payload remotely☆379Updated 11 months ago
- Lateral Movement Using DCOM and DLL Hijacking☆324Updated 2 years ago
- A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.☆200Updated last year
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆440Updated last year
- Process injection alternative☆344Updated last year
- Shaco is a linux agent for havoc☆167Updated 2 years ago
- Port of Cobalt Strike's Process Inject Kit☆189Updated last year
- Cobalt Strike Beacon Object File for bypassing UAC via the CMSTPLUA COM interface.☆208Updated 3 years ago
- Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution☆196Updated 6 months ago
- Generic PE loader for fast prototyping evasion techniques☆241Updated last year
- Weaponized HellsGate/SigFlip☆207Updated 2 years ago
- Run native PE or .NET executables entirely in-memory. Build the loader as an .exe or .dll—DllMain is Cobalt Strike UDRL-compatible☆253Updated 5 months ago