timwhitez / Doge-sRDI

Related projects ⓘ

Alternatives and complementary repositories for Doge-sRDI

• BeneficialCode / KPPL
  Kill Protected Process Light Process (include av)
  ☆54Updated last year
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆38Updated 3 years ago
• evilashz / ProxyAPICall
  Just another version of the custom stack call from Proxy-Function-Calls-For-ETwTI
  ☆32Updated last year
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆30Updated 3 years ago
• timwhitez / Spoofing-Gate
  (Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
  ☆41Updated 2 years ago
• timwhitez / Doge-RL
  Reflective DLL injection Execution
  ☆19Updated 2 years ago
• evilashz / PigSyscall
  An implementation of an indirect system call
  ☆116Updated last year
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆41Updated 2 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆100Updated 2 years ago
• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆44Updated 3 years ago
• N4kedTurtle / HellsGatePoC
  ☆49Updated 4 years ago
• w1u0u1 / kt
  Kernel file/process/object tool
  ☆64Updated 3 years ago
• wilszdev / SchtasksUacBypass
  bypass UAC even when configured to always notify user
  ☆29Updated 3 years ago
• RedSection / printjacker
  Hijack Printconfig.dll to execute shellcode
  ☆98Updated 3 years ago
• bestspear / ReBeacon_ForClang
  Beacon compiled using clang
  ☆59Updated last year
• ch3rn0byl / HookedRDP
  ☆50Updated 4 years ago
• bopin2020 / WindowsCamp
  Windows Kernel Knowledge && Collect Resources on the wire && Nothing innovation by myself &&
  ☆52Updated this week
• MahmoudZohdy / APICallProxy
  Windows API Call Obfuscation
  ☆93Updated last year
• Wra7h / PEResourceInject
  ☆53Updated 2 years ago
• idiotc4t / ObfuscationStrings-new
  ☆30Updated 4 years ago
• timwhitez / killProcessPOC
  use aswArPot.sys to kill process
  ☆64Updated 2 years ago
• HadesW / power-kill
  power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes
  ☆46Updated 3 years ago
• Hagrid29 / BYOVDKit
  bring your own vulnerable driver
  ☆81Updated last year
• knightswd / ProcessGhosting
  ☆72Updated 3 years ago
• timwhitez / Doge-Whisper
  golang implementation of Syswhisper2/Syswhisper3
  ☆23Updated 2 years ago
• th3k3ymak3r / minbeacon
  A work in progress of constructing a minimal http(s) beacon for Cobalt Strike.
  ☆16Updated 2 years ago
• oXis / DoublePulsarPayload
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆29Updated 3 years ago
• NoOne-hub / bypass-BeaconEye
  bypass BeaconEye
  ☆88Updated 3 years ago
• morph3 / Windows-RPC-Backdoor
  Simple windows rpc server for research purposes only
  ☆81Updated 2 years ago
• xpn / ObjectOverloadingPOC
  ☆58Updated 2 years ago