Small tool to play with IOCs caused by Imageload events
☆47May 14, 2023Updated 3 years ago
Alternatives and similar repositories for Hunt-Weird-ImageLoads
Users that are interested in Hunt-Weird-ImageLoads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ETW based POC to identify direct and indirect syscalls☆197Apr 19, 2023Updated 3 years ago
- idk man this was the default github name☆34Apr 23, 2023Updated 3 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- Simple BOF to read the protection level of a process☆123May 10, 2023Updated 3 years ago
- Monitors ETW for security relevant syscalls maintaining the set called by each unique process☆90May 17, 2023Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆32Jan 30, 2025Updated last year
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆260May 10, 2023Updated 3 years ago
- A PoC implementation for dynamically masking call stacks with timers.☆316Feb 13, 2023Updated 3 years ago
- Manually perform syscalls without going through any external API or DLL.☆18Apr 19, 2023Updated 3 years ago
- ☆10Sep 11, 2026Updated last month
- Walks the CFG bitmap to find previously executable but currently hidden shellcode regions☆141May 17, 2023Updated 3 years ago
- Uses Threat-Intelligence ETW events to identify shellcode regions being hidden by fluctuating memory protections☆189May 17, 2023Updated 3 years ago
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆236Jul 25, 2023Updated 3 years ago
- ☆165Jul 31, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Repo containing my public talks☆23May 30, 2023Updated 3 years ago
- Jormungandr is a kernel implementation of a COFF loader, allowing kernel developers to load and execute their COFFs in the kernel.☆242Sep 26, 2023Updated 3 years ago
- Sliver agent rewritten in C++☆49Sep 4, 2024Updated 2 years ago
- ☆211Nov 28, 2023Updated 2 years ago
- Threadless Process Injection through entry point hijacking☆353Sep 10, 2024Updated 2 years ago
- improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys☆49Mar 10, 2023Updated 3 years ago
- (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…☆140Mar 3, 2025Updated last year
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆329Jan 17, 2024Updated 2 years ago
- ☆45Oct 16, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A dynamic unpacking tool☆154Sep 17, 2023Updated 3 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- A POC for Windows Extension Host hooking☆25Jul 13, 2019Updated 7 years ago
- ☆60Jan 9, 2023Updated 3 years ago
- Hides in your attic... I mean process☆26Apr 29, 2026Updated 6 months ago
- windows内核安全与驱动开发代码☆12Apr 4, 2020Updated 6 years ago
- ☆113Feb 17, 2025Updated last year
- A Proof of Concept Rootkit Demonstrating Keylogging and Virtual File System (VFS) Capabilities☆76Sep 21, 2022Updated 4 years ago
- ☆115Oct 10, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆374May 24, 2022Updated 4 years ago
- Pointer encryption library in rust.☆16Apr 13, 2025Updated last year
- Persistence via Shell Extensions☆63Aug 4, 2023Updated 3 years ago
- ☆225Oct 22, 2023Updated 3 years ago
- ☆89Feb 12, 2026Updated 8 months ago
- Using fibers to run in-memory code.☆247Oct 19, 2023Updated 3 years ago
- ☆131Jun 28, 2023Updated 3 years ago