timwhitez / BinHol
Binary Hollowing
☆70Updated 6 months ago
Alternatives and similar repositories for BinHol:
Users that are interested in BinHol are comparing it to the libraries listed below
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆63Updated 2 weeks ago
- more conveniently Visual-Studio-BOF-template☆61Updated last year
- PE to shellcode☆26Updated 2 months ago
- Shellcode Reductio Entropy Tools☆64Updated last year
- beta☆114Updated 5 months ago
- vehsyscall:a syscall project that may bypass EDR☆54Updated last year
- Cobalt Strike BOF that Add a user to localgroup by samr☆126Updated 2 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆71Updated last year
- A Blind EDR Project for Educational Purposes☆26Updated last month
- 主要用于隐藏进程真实路径,进程带windows真签名☆102Updated 4 months ago
- This is a third party agent for Havoc C2 written in golang.☆56Updated last year
- Hidedump:a lsassdump tools that may bypass EDR☆50Updated 9 months ago
- Beta Linker☆20Updated 6 months ago
- impacket编程手册☆101Updated last year
- 白文件patch☆17Updated 6 months ago
- Silently Install Chrome Extension For Persistence☆49Updated 7 months ago
- Resolve the issue of DLLmain function in white and black DLLs hanging when calling shellcode☆140Updated 9 months ago
- Efficient RAT signature locator for bypassing AV/EDR, supporting static scanning and memory scanning.☆33Updated 4 months ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆42Updated 10 months ago
- Self Cleanup in post-ex job☆49Updated 6 months ago
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆67Updated 2 years ago
- 重构Beacon☆152Updated 6 months ago
- Help red teams find opsec processes during engagements☆26Updated 3 months ago
- 基于个人习惯使用C/C++的shellcode开发项目模板☆32Updated 6 months ago
- ☆43Updated 3 months ago
- 通过websocket在IIS8(Windows Server 2012)以上实现socks5代理☆85Updated last year
- Alternative Shellcode Execution Via Callbacks Rewrite In C#☆88Updated last year
- Delete file regardless of whether the handle is used via SetFileInformationByHandle☆41Updated last year