tijme / kong-loader
Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible in memory.
☆16Updated last week
Alternatives and similar repositories for kong-loader:
Users that are interested in kong-loader are comparing it to the libraries listed below
- Rust template/library for implementing your own COFF loader☆49Updated 2 months ago
- Weaponizing DCOM for NTLM Authentication Coercions☆49Updated this week
- BOF for C2 framework☆40Updated 5 months ago
- A python script that automates a C2 Profile build☆35Updated 2 weeks ago
- Proxy function calls through the thread pool with ease☆24Updated last month
- Sniffing files generator☆55Updated last month
- Terms of Use Conditional Access M365 Evilginx Phishlet☆31Updated last month
- An advanced utility for converting Windows Portable Executable (PE) files to position-independent code (PIC) shellcode. It enables execut…☆23Updated last month
- A C# project that builds a Web Applciation which redirects all HTTPS☆24Updated last month
- Section-based payload obfuscation technique for x64☆59Updated 8 months ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆32Updated 6 months ago
- ☆40Updated last week
- ☆52Updated 3 months ago
- Enable or Disable TokenPrivilege(s)☆13Updated 10 months ago
- Cortex EDR Ransomware protection Bypass☆21Updated 2 months ago
- Internal Monologue BOF☆16Updated 3 months ago
- ☆27Updated 3 months ago
- Parser and reconciliation tooling for large Active Directory environments.☆32Updated last month
- Dump LSASS by spoofing command line arguments to procdump.☆19Updated 5 months ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆38Updated 8 months ago
- Rewrite to fit my needs☆27Updated 8 months ago
- Brief writeup of post exploitation methodologies.☆18Updated last year
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆61Updated last year
- Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects☆50Updated this week
- ☆54Updated last month
- ☆54Updated 5 months ago
- BOF to decrypt Signal Desktop chat logs☆65Updated last month
- ☆25Updated last month
- in-process powershell runner for BRC4☆45Updated last year
- macOS dylib stager☆32Updated 2 months ago