susMdT / SharpIndirectSyscallsLinks
☆11Updated 2 years ago
Alternatives and similar repositories for SharpIndirectSyscalls
Users that are interested in SharpIndirectSyscalls are comparing it to the libraries listed below
Sorting:
- API Hammering with C++20☆49Updated 3 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆36Updated 3 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- idk man this was the default github name☆35Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆32Updated 2 years ago
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆30Updated 9 months ago
- Hooked create process injection for meterpreter☆23Updated 4 years ago
- A bunch of shenanigans using functions, VEH and more☆37Updated 5 months ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆23Updated 2 years ago
- ☆47Updated 2 years ago
- Modify managed functions from unmanaged code☆52Updated last year
- Remap ntdll.dll using only NTAPI functions with a suspended process☆26Updated 7 months ago
- Example of using Sleep to create better named pipes.☆41Updated 2 years ago
- miscellaneous codes☆35Updated 2 years ago
- 「⚙️」Detect which native Windows API's (NtAPI) are being hooked☆38Updated 11 months ago
- "D3MPSEC" is a memory dumping tool designed to extract memory dump from Lsass process using various techniques, including direct system c…☆27Updated last year
- A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.☆65Updated 2 years ago
- A work in progress BOF/COFF loader in Rust☆50Updated 2 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆52Updated last year
- ☆60Updated last year
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Updated 2 years ago
- ☆24Updated last year
- Cobalt Strike Beacon Object File to enable the webdav client service on x64 windows hosts☆22Updated 2 years ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Updated last year
- A simple PE loader.☆27Updated 2 years ago
- ☆58Updated 2 years ago
- Just another ntdll unhooking using Parun's Fart technique☆75Updated 2 years ago
- One gate to all syscalls!☆23Updated 3 years ago
- This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for loc…☆55Updated 2 years ago
- Golang Implementation of Hell's gate☆20Updated 2 years ago