Small project looking into how we can build malware with zero-imports by dynamically resolving windows APIs using GetProcAddress and GetModuleHandle windows APIs.
☆39Oct 26, 2023Updated 3 years ago
Alternatives and similar repositories for Zero-Import-Malware
Users that are interested in Zero-Import-Malware are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆48Feb 11, 2023Updated 3 years ago
- powershell免杀混淆器，简单有效。A simple and effective powershell obfuscaiton tool bypass Anti-Virus☆19Dec 2, 2022Updated 3 years ago
- Impacket is a collection of Python classes for working with network protocols.☆21Nov 13, 2025Updated 11 months ago
- Create a malicious pip package (PoC)☆12Sep 14, 2023Updated 3 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆146Dec 16, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆108Sep 12, 2024Updated 2 years ago
- Bypass the Event Trace Windows(ETW) and unhook ntdll.☆115Sep 29, 2023Updated 3 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Oct 31, 2023Updated 2 years ago
- ☆88Jan 2, 2024Updated 2 years ago
- ☆10Dec 8, 2023Updated 2 years ago
- for this repo i wish to keep an archive of available POCs and Descriptions alike,☆12Mar 24, 2022Updated 4 years ago
- Challenge 1 of The Auror Project - Setup AD Lab automatically☆12Apr 26, 2022Updated 4 years ago
- Small Python tool to do DLL Sideloading (and consequently, other DLL attacks).☆57Oct 10, 2022Updated 4 years ago
- generates a shellcode loading powershell script that is xor encrypted☆11Nov 12, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Mass Reverse IP Lookup is a multithreaded tool to reverse ip lookup a list of ip addresses using yougetsignal.com .☆20May 23, 2020Updated 6 years ago
- This PowerShell script applies a memory patch to bypass the Antimalware Scan Interface (AMSI), allowing unrestricted execution of PowerSh…☆18Jun 2, 2024Updated 2 years ago
- ☆38May 20, 2023Updated 3 years ago
- Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege☆229Nov 23, 2023Updated 2 years ago
- Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low…☆146May 6, 2023Updated 3 years ago
- Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8☆347Aug 29, 2024Updated 2 years ago
- This repo for Windows x32-x64 Kernel/User Mode Exploitation writeups and exploits☆25Oct 20, 2025Updated last year
- ☆165Oct 25, 2023Updated 3 years ago
- Classic Process Injection with Memory Evasion Techniques implemantation☆73Oct 28, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Mimikatz built as a static library.☆12Feb 9, 2022Updated 4 years ago
- Yet Another Memory Analyzer for malware detection☆24Aug 4, 2023Updated 3 years ago
- Simple parsers for binary data in Rust☆12Feb 13, 2022Updated 4 years ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆39Nov 16, 2023Updated 2 years ago
- .net config loader☆354Nov 9, 2023Updated 2 years ago
- cs手机版的源码，此处不放源jar包，自行添加编译☆55Nov 3, 2022Updated 3 years ago
- A lightweight Python tool designed to perform SYN port scans, with support for using spoofed source IP addresses as a deception technique…☆13Mar 5, 2025Updated last year
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 6 months ago
- ☆12Jul 31, 2024Updated 2 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- C++ self-Injecting dropper based on various EDR evasion techniques.☆446Feb 11, 2024Updated 2 years ago
- NimSkrull is an adaption from the original Skrull malware anti-copy DRM. Only for the anti-copy feature. (https://github.com/aaaddress1/S…☆13May 20, 2023Updated 3 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- Rust client for the Tailscale Local API☆12Jul 19, 2026Updated 3 months ago
- exploit for cve-2023-47246 SysAid RCE (shell upload)☆51Dec 7, 2023Updated 2 years ago
- Reports of cyber threat intelligence☆14Feb 15, 2023Updated 3 years ago
- This repository implements Threadless Injection in C☆172Dec 23, 2023Updated 2 years ago