timwhitez / Doge-RL

Related projects: ⓘ

• timwhitez / Doge-Unhook
  DLL Unhooking
  ☆12Updated 3 years ago
• evilashz / ProxyAPICall
  Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI
  ☆31Updated last year
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆41Updated 2 years ago
• timwhitez / memmod
  Fork & modify of Wireguard's Memmod
  ☆31Updated last year
• kyxiaxiang / CrackSleeve4.9
  ☆38Updated 11 months ago
• wilszdev / SchtasksUacBypass
  bypass UAC even when configured to always notify user
  ☆29Updated 3 years ago
• myzxcg / BypassUAC-Dll
  Use COM Component Bypass UAC,Dll Version
  ☆30Updated 3 years ago
• Rrarandom / UAC_Bypass
  ☆27Updated this week
• wilszdev / GetTrustedInstallerShell
  impersonate trustedinstaller by fiddling with tokens
  ☆16Updated 3 years ago
• th3k3ymak3r / minbeacon
  A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.
  ☆16Updated 2 years ago
• Kara-4search / DInvoke_shellcodeload_CSharp
  ShellCodeLoader via DInvoke
  ☆48Updated 3 years ago
• Hagrid29 / BOF-SprayAD
  Cobalt Strike Beacon Object File (BOF) that uses LogonUserSSPI API to perform kerberos-based password spray
  ☆42Updated last year
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆41Updated 2 years ago
• qwqdanchun / ScreenShot-BOF
  ☆39Updated last year
• D1rkMtr / ScreenShot
  ☆37Updated this week
• Jeffry38 / HiddenVNC
  A simple hidden vnc.
  ☆31Updated 3 years ago
• BambiZombie / ThreadlessSpawn
  A Simple PoC
  ☆18Updated 3 months ago
• timwhitez / Doge-BlockDLLs
  Preventing 3rd Party DLLs from Injecting into your Malware
  ☆24Updated 3 years ago
• Kara-4search / Fiber_ShellcodeExecution
  Using fibers to execute shellcode in a local process via csharp
  ☆28Updated 2 years ago
• Cobalt-Strike / callback_examples
  This contains a number of examples demonstrating how to use callback functions in supported aggressor script functions
  ☆28Updated 2 months ago
• D0Gshuang / ShellcodeLoader_stager
  ☆18Updated 2 years ago
• timwhitez / Doge-ScreenShot
  desktop screenshot
  ☆29Updated last year
• matthieu-hackwitharts / UnhookMe
  Cobaltstrike BOF to unhook any Nt api
  ☆14Updated last year
• timwhitez / Bof2PIC
  BOF/COFF obj file to PIC(shellcode). by golang
  ☆35Updated last year
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆29Updated 2 years ago
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆30Updated 2 years ago
• timwhitez / Doge-RecycledGate
  Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
  ☆31Updated 2 years ago
• b1-team / phantom
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆14Updated last year
• nicholasvg / RunPE-Process-Hollowing-GO
  Thanks to @d35ha
  ☆10Updated 3 years ago
• w1u0u1 / nanodump
  A flexible tool that creates a minidump of the LSASS process
  ☆12Updated 2 years ago