voidvxvt / HellBunnyLinks
Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks
☆118Updated 8 months ago
Alternatives and similar repositories for HellBunny
Users that are interested in HellBunny are comparing it to the libraries listed below
Sorting:
- Generate an Alphabetical Polymorphic Shellcode☆109Updated last week
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆187Updated 6 months ago
- Stage 0☆163Updated 8 months ago
- Sleep obfuscation☆231Updated 8 months ago
- A Mythic agent for Windows written in C☆133Updated last month
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆225Updated 6 months ago
- 「⚠️」Performing a BYOVD on the truesight.sys driver☆40Updated 8 months ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆192Updated 9 months ago
- Code execution/injection technique using DLL PEB module structure manipulation☆163Updated 2 months ago
- ☆130Updated 5 months ago
- early cascade injection PoC based on Outflanks blog post☆229Updated 9 months ago
- BOF with Synthetic Stackframe☆164Updated 6 months ago
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆162Updated last year
- C2 Agent fully PIC for Mythic with advanced evasion capabilities, dotnet/powershell/shellcode/bof memory executions, lateral moviments, p…☆142Updated this week
- Convert your shellcode into an ASCII string☆113Updated 2 months ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆111Updated last month
- This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.☆80Updated 4 months ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆47Updated last year
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆174Updated 5 months ago
- Shellcode encryptor using a substitution cipher with a randomly generated key.☆139Updated 7 months ago
- Activation Context Hijack☆158Updated 3 weeks ago
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆252Updated 4 months ago
- Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll☆129Updated 4 months ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆91Updated last year
- Proof of Concepts code for Bring Your Own Vulnerable Driver techniques☆161Updated last week
- This repository implements Threadless Injection in C☆172Updated last year
- Injecting DLL into LSASS at boot☆135Updated 4 months ago
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆154Updated last month
- ☆157Updated 8 months ago
- Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows …☆165Updated last week