Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.
☆71Jul 29, 2023Updated 3 years ago
Alternatives and similar repositories for gonut
Users that are interested in gonut are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A BOF/COFF loader implemented in Go and CGO.☆22Jan 16, 2024Updated 2 years ago
- A Go implementation of Cobalt Strike style BOF/COFF loaders.☆285Jun 24, 2026Updated 3 months ago
- impacket programming manual and tutorial — write your own AD PoC with Kerberos/RPC/DCOM/WMI source-level guides (中英双语+PDF)☆107Sep 13, 2026Updated last week
- ☆43Jul 10, 2023Updated 3 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆28Sep 8, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Simple PoC☆22May 24, 2024Updated 2 years ago
- ☆29May 10, 2024Updated 2 years ago
- Various implementations for C# in memory execution. Assembly.Load() Assembly.LoadFile() AppDomain.ExecuteAssembly()☆34Feb 10, 2021Updated 5 years ago
- DNS Tunneling as net.Conn☆16Dec 22, 2024Updated last year
- A Patchless AMSI Bypass Technique using VEH²☆33Jun 22, 2025Updated last year
- load assembly executable file in memory☆42Aug 11, 2023Updated 3 years ago
- Tool scan EternalBlue by golang☆21Sep 13, 2019Updated 7 years ago
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆312Jul 31, 2024Updated 2 years ago
- Shellcode loader generator with multiples features☆509Dec 31, 2024Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- rust clr heap encryption (https://github.com/lap1nou/CLR_Heap_encryption), but no heap encryption.☆17Jan 6, 2024Updated 2 years ago
- Alternative Shellcode Execution Via Callbacks Rewrite In C#☆89Apr 28, 2023Updated 3 years ago
- Binary Hollowing☆96Sep 10, 2024Updated 2 years ago
- A client library to interact with Windows RPC services such as MS-SRVS and MS-RRP.☆81Aug 22, 2026Updated last month
- 获取chrome 浏览器记录☆44Sep 6, 2025Updated last year
- ☆17Nov 23, 2023Updated 2 years ago
- 关于RPC一些绕EDR的tips☆201Mar 3, 2023Updated 3 years ago
- 重构Beacon☆164Aug 19, 2024Updated 2 years ago
- 一个简易的woodpecker反序列化插件☆43Jun 7, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- EDR绕过demo☆291Jan 14, 2024Updated 2 years ago
- Test AMSI Provider implementation in C#☆45Dec 18, 2024Updated last year
- Fileless atexec, no more need for port 445☆413Mar 28, 2024Updated 2 years ago
- 添加计划任务方法集合☆313Aug 6, 2023Updated 3 years ago
- ☆222Mar 10, 2024Updated 2 years ago
- File entropy calculator - Golang☆30Feb 7, 2024Updated 2 years ago
- lsassdump via RtlCreateProcessReflection and NanoDump☆86Oct 18, 2024Updated last year
- Get sql server connection configuration information☆27Aug 26, 2024Updated 2 years ago
- Lateral Movement☆125Nov 14, 2023Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Python tool to interact with WMI StdRegProv☆61Nov 19, 2024Updated last year
- ☆15Nov 19, 2023Updated 2 years ago
- Terminate AV/EDR Processes using kernel driver☆353Jun 12, 2023Updated 3 years ago
- Execute unmanaged Windows executables in CobaltStrike Beacons☆721Mar 4, 2023Updated 3 years ago
- Generate an obfuscated DLL that will disable AMSI & ETW☆334Jul 15, 2024Updated 2 years ago
- Porting of BOF InlineExecute-Assembly to load .NET assembly in process but with patchless AMSI and ETW bypass using hardware breakpoint.☆300Jun 12, 2026Updated 3 months ago
- 针对finereportv10反序列化接口/webroot/decision/remote/design/channel进行无回显检测并提供Godzilla memshell注入功能（部分环境缺少依赖无法成功）☆22Oct 17, 2023Updated 2 years ago