timwhitez / Doge-sRDI
Shellcode implementation of Reflective DLL Injection by Golang. Convert DLLs to position independent shellcode
☆58Updated 3 years ago
Alternatives and similar repositories for Doge-sRDI:
Users that are interested in Doge-sRDI are comparing it to the libraries listed below
- (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll☆43Updated 2 years ago
- Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI☆31Updated last year
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆39Updated 3 years ago
- Kill Protected Process Light Process (include av)☆55Updated last year
- x64 version☆30Updated 3 years ago
- It stinks☆101Updated 2 years ago
- Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses☆40Updated 4 years ago
- Windows API Call Obfuscation☆99Updated 2 years ago
- Kernel file/process/object tool☆64Updated 3 years ago
- bypass UAC even when configured to always notify user☆29Updated 3 years ago
- Preventing 3rd Party DLLs from Injecting into your Malware☆25Updated 3 years ago
- An implementation of an indirect system call☆119Updated last year
- ☆50Updated 4 years ago
- ☆74Updated 3 years ago
- A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.☆19Updated 2 years ago
- Reflective DLL injection Execution☆19Updated 2 years ago
- Beacon compiled using clang☆63Updated 2 years ago
- ☆32Updated 4 years ago
- use aswArPot.sys to kill process☆67Updated 2 years ago
- HookDetection☆45Updated 3 years ago
- bypass BeaconEye☆88Updated 3 years ago
- Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF☆41Updated 2 years ago
- Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&☆55Updated last month
- ReturnGate, just like HellsGate.☆66Updated 2 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆29Updated 3 years ago
- power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes☆46Updated 3 years ago
- golang implementation of Syswhisper2/Syswhisper3☆23Updated 2 years ago
- ☆56Updated 2 years ago
- BOF/COFF obj file to PIC(shellcode). by golang☆37Updated 2 years ago
- Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.☆54Updated last year