stavinski / winhookLinks
Go library to allow native inline hooking in windows at runtime
☆14Updated last year
Alternatives and similar repositories for winhook
Users that are interested in winhook are comparing it to the libraries listed below
Sorting:
- GoLang package for creating Mythic Payload Types, C2 Profiles, Translation Services, WebHook listeners, and Loggers☆20Updated last week
- A simple reverse ssh/proxy implant PoC for *nix systems.☆55Updated last year
- Understanding WinRAR Code Execution Vulnerability (CVE-2023-38831)☆40Updated 2 years ago
- Items related to the RedELK workshop given at security conferences☆29Updated 2 years ago
- Golang bindings for PE-sieve☆42Updated last year
- A proof-of-concept created for academic/learning purposes, demonstrating both local and remote use of VSTO "Add-In's" maliciously☆31Updated 2 years ago
- A shellcode runner / injector / hollower in Go, for windows☆25Updated 3 years ago
- Socks4a proxy leveraging PIC, Websockets and static obfuscation on assembly level☆26Updated 3 years ago
- ☆20Updated last year
- This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…☆24Updated 3 years ago
- Extension functionality for the NightHawk operator client☆26Updated 2 years ago
- ADSI based SA tool☆17Updated 3 years ago
- Abusing Remote Windows SMB Shares for Fun and Pen Testing☆15Updated 2 years ago
- WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.☆55Updated 4 years ago
- A collection of my presentation materials.☆17Updated last year
- A PoC weaponising CustomXMLPart for hiding malware code inside of Office document structures.☆39Updated 3 years ago
- Right-To-Left Override POC☆36Updated 3 years ago
- Unfixed Windows PowerShell Filename Code Execution POC☆41Updated last year
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Updated 2 years ago
- A third-party Gopher Assassin for the Havoc Framework.☆44Updated last year
- A PoC for achieving persistence via push notifications on Windows☆47Updated 2 years ago
- PoC MSI payload based on ASEC/AhnLab's blog post☆23Updated 3 years ago
- Automated Persistence and Lateral Movement using GCP Patch Management☆16Updated 3 years ago
- Cisco CallManager User Enumeration☆15Updated 3 years ago
- Simple PoC Python agent to showcase Havoc C2's custom agent interface. Not operationally safe or stable. Released with accompanying blog …☆87Updated 2 years ago
- PoC for detecting and evading ETW detection of .Net Assembly.Load☆21Updated 5 years ago
- ☆52Updated 2 years ago
- Dropping a powershell script at %HOMEPATH%\Documents\WindowsPowershell\ , that contains the implant's path , and whenever powershell pro…☆84Updated 2 years ago
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆33Updated 2 years ago
- Check for NotProxyShell CVE-2022-40140 & CVE-2022-41082☆26Updated 3 years ago