umpolungfish / byvalverLinks
takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities
☆53Updated this week
Alternatives and similar repositories for byvalver
Users that are interested in byvalver are comparing it to the libraries listed below
Sorting:
- Mentally ill EtwTi parser☆67Updated 2 months ago
- ☆19Updated 3 months ago
- ☆31Updated last year
- Callstack spoofing using a VEH because VEH all the things.☆23Updated 9 months ago
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆120Updated last month
- ☆61Updated 8 months ago
- Adaptive DLL hijacking / dynamic export forwarding - EAT preserve☆78Updated last year
- Commandline spoofing on Windows☆89Updated last month
- ☆58Updated 2 months ago
- Dll injection through code page id modification in registry. Based on jonas lykk research☆17Updated 3 years ago
- Demoting PPL anti-malware services to less than a guest user☆65Updated 11 months ago
- ☆52Updated 9 months ago
- A Payload Analysis Framework☆112Updated 2 months ago
- ☆98Updated last year
- ☆108Updated last year
- From C, Rust or Zig to binary shellcode compiler based on Mingw gcc. It allows using Win32 APIs and standard libraries without any change…☆52Updated 3 months ago
- Proof-of-concept kernel driver that hijacks the Windows kernel extension table mechanism to preserve process notify callbacks even when a…☆92Updated 6 months ago
- A more reliable way of resolving syscall numbers in Windows☆52Updated last year
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆117Updated 2 weeks ago
- A collection of position independent coding resources☆105Updated last month
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Updated 2 years ago
- Easy peasy file uploads☆33Updated 4 months ago
- Payload Obfuscation for Red Teams workshop materials☆78Updated last month
- use python on windows with full submodule support without installation☆30Updated 11 months ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆78Updated 4 months ago
- BOF for C2 framework☆44Updated last year
- Gain insights into COM/DCOM implementations that may be vulnerable using an automated approach and make it easy to visualize the data. By…☆154Updated last month
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆118Updated last year
- Slides and resources from MCTTP 2025 Talk☆66Updated 2 months ago
- shell code example☆67Updated 3 weeks ago