Educational PowerShell-based shellcode injection library.
☆17Aug 2, 2026Updated last month
Alternatives and similar repositories for ShellcodeLoaderPS
Users that are interested in ShellcodeLoaderPS are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆15Mar 24, 2026Updated 5 months ago
- Shellcode loader that hides payload within Egyptian hieroglyphic Unicode characters (U+13000 plane) to evade detection. It decodes the gl…☆15Nov 20, 2025Updated 9 months ago
- Collection of malleable payloads and tools that will bypass AMSI, Windows Defender, and self-signed certificate checks.☆43Mar 21, 2025Updated last year
- multi layer encryption for payloads with options of delivery welcome to the Tenebris side☆27May 9, 2026Updated 4 months ago
- Performs a global AMSI bypass by patching amsi.dll in memory.☆20Oct 14, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A cargo-like build system for C☆11Dec 16, 2024Updated last year
- Evasive loader for .NET Framework assemblies☆83May 12, 2026Updated 4 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆118Dec 21, 2025Updated 8 months ago
- Cross-platform Python implementation of the GoldenGMSA attack for exploiting Group Managed Service Accounts (gMSA) in Active Directory.☆36Mar 24, 2026Updated 5 months ago
- ☆11Aug 5, 2026Updated last month
- An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD d…☆55Jul 10, 2026Updated 2 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆14Feb 16, 2026Updated 7 months ago
- Windows named pipe hooking toolkit☆45Mar 20, 2026Updated 5 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆63Apr 13, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆163Updated this week
- ☆44Jul 1, 2026Updated 2 months ago
- .NET wrapper around LogonUserA to test creds☆13Jun 2, 2022Updated 4 years ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆28Jul 23, 2026Updated last month
- ☆30Jul 26, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆13Feb 4, 2024Updated 2 years ago
- suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those coveri…☆21Jul 8, 2026Updated 2 months ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆17Jul 23, 2026Updated last month
- Execute shellcode via ASPNET compiler☆60Oct 2, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆82Jul 20, 2026Updated last month
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆55Sep 11, 2026Updated last week
- Adaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.☆65May 4, 2026Updated 4 months ago
- Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR…☆111Aug 8, 2026Updated last month
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more☆95Jun 24, 2026Updated 2 months ago
- The NeoC2 Framework☆37Aug 28, 2026Updated 3 weeks ago
- ☆20Sep 2, 2026Updated 2 weeks ago
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆62May 4, 2026Updated 4 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Rust-based linux reverse shell listener.☆12Aug 7, 2024Updated 2 years ago
- Keycloak with Cloudflare Tunnel using docker-compose☆15Oct 26, 2020Updated 5 years ago
- ILANDS Sensor traffic data analysis software packages☆10Apr 9, 2026Updated 5 months ago
- A simple script to elevate current session to SYSTEM (needs to be run as Administrator)☆16Nov 11, 2024Updated last year
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated last month
- ☆54Feb 12, 2026Updated 7 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆102Sep 3, 2026Updated 2 weeks ago