tijme / kong-loaderLinks
Using Just In Time (JIT) instruction decryption, this shellcode loader ensures that only the currently executing instruction is visible in memory.
☆38Updated 4 months ago
Alternatives and similar repositories for kong-loader
Users that are interested in kong-loader are comparing it to the libraries listed below
Sorting:
- ☆53Updated 2 months ago
- Local SYSTEM auth trigger for relaying - X☆136Updated last month
- A python script that automates a C2 Profile build☆43Updated 5 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆49Updated 3 months ago
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆54Updated 4 months ago
- Modern PIC implant for Windows (64 & 32 bit)☆102Updated last month
- Impersonate Tokens using only NTAPI functions☆79Updated 4 months ago
- Terms of Use Conditional Access M365 Evilginx Phishlet☆38Updated 2 months ago
- A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.☆30Updated 6 months ago
- Remote DLL Injection with Timer-based Shellcode Execution☆95Updated last month
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆97Updated last month
- Lateral movement with DCOM DLL hijacking☆137Updated last month
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆148Updated last month
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆74Updated last year
- ☆110Updated 6 months ago
- A process injection technique using only thread context manipulation☆37Updated last year
- Early Bird Cryo Injections – APC-based DLL & Shellcode Injection via Pre-Frozen Job Objects☆102Updated 4 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆79Updated 5 months ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆63Updated last year
- A hoontr must hoont☆62Updated 2 weeks ago
- Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.☆67Updated last month
- ☆53Updated 8 months ago
- BOF to decrypt Signal Desktop chat logs☆66Updated 6 months ago
- Evasive Payload Delivery Server & C2 Redirector☆96Updated 3 weeks ago
- BOF for C2 framework☆42Updated 9 months ago
- A collection of position independent coding resources☆92Updated 6 months ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆76Updated last year
- A BOF to enumerate system process, their protection levels, and more.☆119Updated 9 months ago
- Windows Thread Pool Injection Havoc Implementation☆32Updated last year
- ForsHops☆146Updated 5 months ago