sevagas / MagicLib

Related projects: ⓘ

• D4rthMaulCop / DarthLoader
  ☆14Updated last year
• paranoidninja / DotNetTracer
  C code to enable ETW tracing for Dotnet Assemblies
  ☆28Updated 2 years ago
• waleedassar / SyscallNumberExtractor
  ☆23Updated 2 years ago
• last-byte / hybris
  ☆22Updated this week
• williamknows / CodeCoverageModuleStomping
  ☆10Updated 4 years ago
• S4R1N / TotallyNotAStager
  ☆15Updated this week
• klinix5 / GoogleUpdateSvcLPE
  ☆22Updated this week
• Mr-Un1k0d3r / RedTeamFSharp
  ☆25Updated this week
• SecIdiot / bootdoor
  ☆31Updated this week
• 11philip22 / CodeInjection
  Collection of shellcode injection and execution techniques
  ☆17Updated 3 years ago
• SolomonSklash / COM-Hijacking
  An example of COM hijacking using a proxy DLL.
  ☆20Updated 3 years ago
• xinbailu / DripLoader-Ops
  ☆14Updated this week
• Adepts-Of-0xCC / SnoopyOwl
  ☆44Updated 3 years ago
• PorLaCola25 / NtCreateUserProcess
  ☆12Updated 3 years ago
• ChaitanyaHaritash / NIM-Scripts
  ☆17Updated 3 years ago
• SolomonSklash / netntlm
  A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP
  ☆32Updated 3 years ago
• daem0nc0re / HEVD-CSharpKernelPwn
  CSharp Writeups for HackSys Extreme Vulnerable Driver
  ☆43Updated 2 years ago
• GetRektBoy724 / Breaking-Detecting-Direct-Syscall-Techniques
  A repository filled with ideas to break/detect direct syscall techniques
  ☆26Updated 2 years ago
• bohops / Notes
  ☆10Updated this week
• fdiskyou / windows-ps-callbacks-experiments
  ☆40Updated this week
• passthehashbrowns / hook-integrity-checks
  ☆20Updated 3 years ago
• DimopoulosElias / Primitives
  ☆31Updated 4 years ago
• hackerhouse-opensource / envschtasksuacbypass
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆53Updated 2 years ago
• sk3w / beacon-object-files
  Miscellaneous examples for use with Cobalt Strike Beacon
  ☆10Updated 3 years ago
• klezVirus / LoGiC.NET
  A more advanced free and open .NET obfuscator using dnlib.
  ☆10Updated last year
• bharadwajyas / ppdump-public
  Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…
  ☆23Updated 4 years ago
• aaaddress1 / masqueradeCmdline
  A PoC to demo modifying cmdline of the child process dynamically. It might be useful against process log tracing, AV or EDR.
  ☆38Updated 3 years ago
• thefLink / Memfiddler
  Executes shellcode from a remote server and aims to evade in-memory scanners
  ☆29Updated 4 years ago
• a7t0fwa7 / windows-ps-callbacks-experiments
  Files for http://deniable.org/windows/windows-callbacks
  ☆24Updated 4 years ago