unkvolism / Fuck-EtwLinks
Bypass the Event Trace Windows(ETW) and unhook ntdll.
☆115Updated 2 years ago
Alternatives and similar repositories for Fuck-Etw
Users that are interested in Fuck-Etw are comparing it to the libraries listed below
Sorting:
- This project is an implant framework designed for long term persistent access to Windows machines.☆110Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated 2 years ago
- C++ Staged Shellcode Loader with Evasion capabilities.☆99Updated last year
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆100Updated 2 years ago
- ☆79Updated 2 years ago
- Example code samples from our ScriptBlock Smuggling Blog post☆93Updated last year
- Automated .NET AppDomain hijack payload generation☆130Updated 10 months ago
- Scripts I use to deploy Havoc on Linode and setup categorization and SSL☆42Updated last year
- Dropping a powershell script at %HOMEPATH%\Documents\WindowsPowershell\ , that contains the implant's path , and whenever powershell pro…☆86Updated 2 years ago
- Encodes a payload within a generated mock-CSS file☆59Updated 2 years ago
- ShadowForge Command & Control - Harnessing the power of Zoom's API, control a compromised Windows Machine from your Zoom Chats.☆51Updated 2 years ago
- random code snippets, useful for getting started☆123Updated last month
- PoC for dumping and decrypting cookies in the latest version of Microsoft Teams☆132Updated 2 years ago
- a variety of tools,scripts and techniques developed and shared with different programming languages by 0xsp Lab☆64Updated last year
- Do some DLL SideLoading magic☆89Updated 2 years ago
- Work, timer, and wait callback example using solely Native Windows APIs.☆88Updated last year
- ☆109Updated 10 months ago
- 「💀」Proof of concept on BYOVD attack☆165Updated last year
- The program uses the Windows API functions to traverse through directories and locate DLL files with RWX section☆108Updated 2 years ago
- Find DLLs with RWX section☆80Updated 2 years ago
- ☆122Updated 2 years ago
- Your syscall factory☆126Updated last week
- 「⚠️」Performing a BYOVD on the truesight.sys driver☆44Updated last year
- C# havoc implant☆101Updated 2 years ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆102Updated 9 months ago
- ☆107Updated 2 years ago
- Create Anti-Copy DRM Malware☆69Updated last year
- Bypass AMSI By Dividing files into multiple smaller files☆46Updated 3 years ago
- Command and Control (C2) framework☆132Updated 7 months ago
- Basic interactive Windows kernel offensive toolkit written in C☆134Updated 3 months ago