micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.
☆229Apr 20, 2026Updated 6 months ago
Alternatives and similar repositories for micr0_shell
Users that are interested in micr0_shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Allows extraction of the Global Address List (GAL) in OWA (Outlook Web Access)☆14Jun 17, 2021Updated 5 years ago
- Null-free shellcode for TCP reverse shell on Windows x64☆60Feb 19, 2024Updated 2 years ago
- Amsi Bypass payload that works on Windwos 11☆379Jul 30, 2023Updated 3 years ago
- Null-free shellcode for running calc.exe on Windows x64☆14Mar 24, 2024Updated 2 years ago
- Use hardware breakpoint to dynamically change SSN in run-time☆280Apr 10, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆326Apr 12, 2024Updated 2 years ago
- Poc script for ProxyShell exploit chain in Exchange Server☆25Feb 24, 2022Updated 4 years ago
- ☆83Nov 27, 2023Updated 2 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆21Oct 15, 2026Updated 3 weeks ago
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆1,638Mar 17, 2026Updated 7 months ago
- Use SE_BACKUP_NAME/SeBackupPrivilege to access objects you shouldn't have access to☆482Jul 29, 2013Updated 13 years ago
- Powerview on steroids☆1,015Oct 18, 2026Updated 2 weeks ago
- A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.☆1,487Jul 27, 2025Updated last year
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,202Oct 16, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- RunasCs - Csharp and open version of windows builtin runas.exe☆1,450Jul 12, 2024Updated 2 years ago
- Evasive Golang Loader☆139Jul 27, 2024Updated 2 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆298Jul 15, 2023Updated 3 years ago
- Analyse your malware to surgically obfuscate it☆550Jun 27, 2026Updated 4 months ago
- A tool for generating multiple types of NTLMv2 hash theft files by Jacob Wilkin (Greenwolf)☆1,507Sep 9, 2026Updated last month
- SeImpersonate privilege escalation tool for Windows 8 - 11 and Windows Server 2012 - 2022 with extensive PowerShell and .NET reflection s…☆532May 16, 2024Updated 2 years ago
- Dropping a powershell script at %HOMEPATH%\Documents\WindowsPowershell\ , that contains the implant's path , and whenever powershell pro…☆84Aug 2, 2023Updated 3 years ago
- GregsBestFriend process injection code created from the White Knight Labs Offensive Development course☆206Jun 23, 2023Updated 3 years ago
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆962Oct 28, 2026Updated last week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.☆318Sep 29, 2026Updated last month
- Experience the power of a PHP webshell designed to overcome the limitations of blacklisted system/exec functions.☆26Jul 14, 2024Updated 2 years ago
- Windows x64 kernel mode rootkit process hollowing POC.☆194Jun 30, 2023Updated 3 years ago
- Fileless Command Execution for Lateral Movement in Nim☆403Apr 4, 2026Updated 7 months ago
- A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.☆2,347Apr 24, 2026Updated 6 months ago
- CLI monitor for windows process- & file activity☆100Nov 20, 2020Updated 5 years ago
- scan for NTLM directories☆396Aug 13, 2025Updated last year
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- Kernel mode WinDbg extension and PoCs for token privilege investigation.☆1,032Sep 28, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A new AMSI Bypass technique using .NET ALI Call Hooking.☆196Nov 15, 2022Updated 3 years ago
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,426Oct 27, 2023Updated 3 years ago
- BloodyAD is an Active Directory Privilege Escalation Framework☆2,344Updated this week
- C# obfuscator that bypass windows defender☆834Jun 4, 2023Updated 3 years ago
- Template-based shellcode packer written in Rust. Made with <3 for pentesters.☆359Oct 28, 2026Updated last week
- Lists who can read any gMSA password blobs and parses them if the current user has access.☆389Feb 12, 2024Updated 2 years ago
- Ask a TGS on behalf of another user without password☆479Mar 30, 2025Updated last year