unkvolism / Fuck-EtwLinks
Bypass the Event Trace Windows(ETW) and unhook ntdll.
☆115Updated 2 years ago
Alternatives and similar repositories for Fuck-Etw
Users that are interested in Fuck-Etw are comparing it to the libraries listed below
Sorting:
- This project is an implant framework designed for long term persistent access to Windows machines.☆109Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated 2 years ago
- C++ Staged Shellcode Loader with Evasion capabilities.☆97Updated last year
- ☆109Updated 11 months ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Updated last year
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆102Updated 9 months ago
- An updated version of keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard in…☆105Updated 2 years ago
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆102Updated 2 years ago
- ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.☆51Updated 2 years ago
- Encodes a payload within a generated mock-CSS file☆59Updated 2 years ago
- PoC for dumping and decrypting cookies in the latest version of Microsoft Teams☆132Updated 2 years ago
- Create Anti-Copy DRM Malware☆71Updated last year
- Dropping a powershell script at %HOMEPATH%\Documents\WindowsPowershell\ , that contains the implant's path , and whenever powershell pro…☆86Updated 2 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆94Updated last year
- random code snippets, useful for getting started☆123Updated last month
- ☆79Updated 2 years ago
- The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section☆110Updated 2 years ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42Updated last year
- Do some DLL SideLoading magic☆89Updated 2 years ago
- Lateral Movement via the .NET Profiler☆98Updated last year
- 「⚠️」Performing a BYOVD on the truesight.sys driver☆44Updated last year
- Automated .NET AppDomain hijack payload generation☆128Updated 11 months ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆51Updated last year
- A repository with my code snippets for research/education purposes.☆52Updated 2 years ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆84Updated last year
- ☆61Updated 2 years ago
- ☆122Updated 2 years ago
- Find DLLs with RWX section☆80Updated 2 years ago
- Situational Awareness script to identify how and where to run implants☆67Updated last year
- a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab☆64Updated last year