Educational PowerShell-based shellcode injection library.
☆17Aug 2, 2026Updated 2 months ago
Alternatives and similar repositories for ShellcodeLoaderPS
Users that are interested in ShellcodeLoaderPS are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Patchless AMSI + ETW bypass via PAGE_GUARD exceptions and Vectored Exception Handler (VEH)☆16Mar 24, 2026Updated 6 months ago
- Shellcode loader that hides payload within Egyptian hieroglyphic Unicode characters (U+13000 plane) to evade detection. It decodes the gl…☆15Nov 20, 2025Updated 10 months ago
- Collection of malleable payloads and tools that will bypass AMSI, Windows Defender, and self-signed certificate checks.☆43Mar 21, 2025Updated last year
- multi layer encryption for payloads with options of delivery welcome to the Tenebris side☆27May 9, 2026Updated 5 months ago
- Performs a global AMSI bypass by patching amsi.dll in memory.☆21Oct 14, 2025Updated 11 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A cargo-like build system for C☆11Dec 16, 2024Updated last year
- Evasive loader for .NET Framework assemblies☆84May 12, 2026Updated 4 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆117Dec 21, 2025Updated 9 months ago
- Cross-platform Python implementation of the GoldenGMSA attack for exploiting Group Managed Service Accounts (gMSA) in Active Directory.☆36Mar 24, 2026Updated 6 months ago
- ☆11Aug 5, 2026Updated 2 months ago
- An implementation of PyADRecon using ADWS instead of LDAP. Generates individual CSV files and a single XSLX + HTML report about your AD d…☆55Jul 10, 2026Updated 2 months ago
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆14Feb 16, 2026Updated 7 months ago
- Windows named pipe hooking toolkit☆46Mar 20, 2026Updated 6 months ago
- Pure PowerShell port of PassTheCert tool to authenticate to an LDAP/S server with a certificate through Schannel☆63Apr 13, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆169Sep 13, 2026Updated 3 weeks ago
- ☆45Jul 1, 2026Updated 3 months ago
- .NET wrapper around LogonUserA to test creds☆13Jun 2, 2022Updated 4 years ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆28Jul 23, 2026Updated 2 months ago
- ☆30Jul 26, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those coveri…☆21Sep 18, 2026Updated 3 weeks ago
- Async port/ping scanner BOF. Supports IP/port ranges, CIDR notation and hostnames.☆17Jul 23, 2026Updated 2 months ago
- Execute shellcode via ASPNET compiler☆60Oct 2, 2025Updated last year
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆63Sep 11, 2026Updated 3 weeks ago
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆86Jul 20, 2026Updated 2 months ago
- Phantom-Evasion-Loader is a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR…☆113Aug 8, 2026Updated 2 months ago
- Adaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.☆66May 4, 2026Updated 5 months ago
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more☆96Jun 24, 2026Updated 3 months ago
- The NeoC2 Framework☆38Sep 23, 2026Updated 2 weeks ago
- ☆20Sep 2, 2026Updated last month
- AdaptixC2 default beacon agent extended to support Crystal Palace loaders.☆63May 4, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Rust-based linux reverse shell listener.☆12Aug 7, 2024Updated 2 years ago
- Keycloak with Cloudflare Tunnel using docker-compose☆15Oct 26, 2020Updated 5 years ago
- ILANDS Sensor traffic data analysis software packages☆10Apr 9, 2026Updated 6 months ago
- A simple script to elevate current session to SYSTEM (needs to be run as Administrator)☆16Nov 11, 2024Updated last year
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 2 months ago
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆108Oct 1, 2026Updated last week
- ☆55Feb 12, 2026Updated 7 months ago