trustedsec / ELFLoader
☆269Updated 2 years ago
Alternatives and similar repositories for ELFLoader:
Users that are interested in ELFLoader are comparing it to the libraries listed below
- x64 Assembly HalosGate direct System Caller to evade EDR UserLand hooks☆207Updated 2 years ago
- A PoC implementation for dynamically masking call stacks with timers.☆274Updated 2 years ago
- ☆196Updated 4 years ago
- ☆521Updated 3 weeks ago
- FreshyCalls tries to make the use of syscalls comfortable and simple, without generating too much boilerplate and in modern C++17!☆329Updated 2 years ago
- Load and execute COFF files and Cobalt Strike BOFs in-memory☆215Updated 2 years ago
- Dump the memory of any PPL with a Userland exploit chain☆333Updated 2 years ago
- GhostWriting Injection Technique.☆170Updated 7 years ago
- Tools and technical write-ups describing attacking techniques that rely on concealing code execution on Windows☆207Updated 2 years ago
- miscellaneous scripts and programs☆241Updated 3 months ago
- An implementation and proof-of-concept of Process Forking.☆226Updated 3 years ago
- EarlyBird process hollowing technique (BOF) - Spawns a process in a suspended state, inject shellcode, hijack main thread with APC, and e…☆280Updated 2 years ago
- Move CS beacon to GPU memory when sleeping☆246Updated 3 years ago
- A shellcode function to encrypt a running process image when sleeping.☆338Updated 3 years ago
- Beacon Object File Loader☆286Updated last year
- ☆199Updated 3 years ago
- ☆164Updated 3 years ago
- Experiment on reproducing Obfuscate & Sleep☆144Updated 4 years ago
- Building and Executing Position Independent Shellcode from Object Files in Memory☆156Updated 4 years ago
- A Visual Studio template used to create Cobalt Strike BOFs☆304Updated 3 years ago
- A small PoC that creates processes in Windows☆181Updated 10 months ago
- A basic emulation of an "RPC Backdoor"☆240Updated 2 years ago
- A little tool to play with the Seclogon service☆312Updated 2 years ago
- A Nim implementation of reflective PE-Loading from memory☆278Updated 7 months ago
- An easily modifiable shellcode template for Windows x64 written in C☆253Updated last year
- ShellWasp is a tool to help build shellcode that utilizes Windows syscalls, while overcoming the portability problem associated with Wind…☆167Updated last year
- A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC☆365Updated 2 years ago
- Silence EDRs by removing kernel callbacks☆231Updated 4 years ago
- A very proof-of-concept port of InlineWhispers for using syscalls in Nim projects.☆167Updated 3 years ago
- PoC MSVC COFF Object file loader/injector.☆176Updated 4 years ago