Executes shellcode from a remote server and aims to evade in-memory scanners
☆31Nov 17, 2019Updated 6 years ago
Alternatives and similar repositories for Memfiddler
Users that are interested in Memfiddler are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆209Mar 22, 2021Updated 5 years ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆35Sep 15, 2022Updated 4 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- PoC code and tools for Black Hat USA 2024☆26Aug 1, 2024Updated 2 years ago
- Listing UDP connections with remote address without sniffing.☆31Sep 26, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Proof-of-Concept to evade auditd by tampering via ptrace☆19Aug 3, 2023Updated 3 years ago
- Various methods of executing shellcode☆75Mar 27, 2023Updated 3 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- UUID based Shellcode loader for your favorite C2☆86Dec 8, 2021Updated 4 years ago
- Safely manage the unloading of DLLs that have been hooked into a process. Context: https://github.com/KNSoft/KNSoft.SlimDetours/discussio…☆82Jun 21, 2025Updated last year
- A simple PoC to invoke an encrypted shellcode by using an hidden call☆115Nov 19, 2022Updated 3 years ago
- Get your data from the resource section manually, with no need for windows apis☆66Oct 22, 2024Updated 2 years ago
- ☆25Apr 28, 2024Updated 2 years ago
- GetModuleHandle (via PEB) and GetProcAddress (via EAT) like☆32Feb 7, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Beacon Object File (BOF) for remote process injection via thread hijacking☆224Jan 13, 2021Updated 5 years ago
- A lexer and parser for Sleep☆20Feb 20, 2026Updated 8 months ago
- A Practical example of ELAM (Early Launch Anti-Malware)☆35Nov 12, 2021Updated 4 years ago
- A kernel driver to get a Handle to virtually *every* process☆15Jan 16, 2024Updated 2 years ago
- My try to implement a virtual CPU in C☆18Nov 18, 2023Updated 2 years ago
- It's pointy and it hurts!☆126Oct 18, 2022Updated 4 years ago
- JavaScript debugger extension for WinDbg that allows to dump the partitions running on Hyper-V☆12Jul 28, 2021Updated 5 years ago
- A collection of useful aggressor scripts. All credits due to its authors.☆12Jul 5, 2019Updated 7 years ago
- Modify managed functions from unmanaged code☆53Feb 1, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Data and structures regarding the research done on WdFilter☆12Apr 15, 2020Updated 6 years ago
- Just another casual shellcode native loader☆24Feb 3, 2022Updated 4 years ago
- IOCTLpus can be used to make DeviceIoControl requests with arbitrary inputs (with functionality somewhat similar to Burp Repeater).☆100Dec 20, 2021Updated 4 years ago
- hooking KiUserApcDispatcher☆26Apr 3, 2017Updated 9 years ago
- ☆30Nov 7, 2022Updated 3 years ago
- Proof-of-Concept to evade auditd by writing /proc/PID/mem☆24Aug 21, 2023Updated 3 years ago
- Finding Truth in the Shadows☆126Jan 26, 2023Updated 3 years ago
- A synergized Visual Studio and Rust development environment☆18Jan 25, 2025Updated last year
- Proof of concept - Covert Channel using Windows Filtering Platform (C#)☆21Aug 29, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CreateRemoteThreadPlus: how to pass multiple parameters to the remote thread function without shellcode.☆142Jul 10, 2025Updated last year
- 64bit Windows 10 shellcode that adds user BOKU:SP3C1ALM0V3 to the system and the localgroups Administrators & "Remote Desktop Users"☆38May 3, 2021Updated 5 years ago
- Windows (ShadowMove) Socket Duplication☆86Apr 19, 2020Updated 6 years ago
- PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.☆628Sep 26, 2023Updated 3 years ago
- A C port of b33f's UrbanBishop☆38Oct 1, 2020Updated 6 years ago
- A BOF to parse the imports of a provided PE-file, optionally extracting symbols on a per-dll basis.☆86Oct 28, 2021Updated 5 years ago
- ☆164Jul 31, 2022Updated 4 years ago