wheelerlaw / go-memory-moduleLinks
Go wrapper for in-memory DLL module loader, MemoryModule
☆32Updated 7 years ago
Alternatives and similar repositories for go-memory-module
Users that are interested in go-memory-module are comparing it to the libraries listed below
Sorting:
- Utility for hunting UAC bypasses or COM/DLL hijacks that alerts on the exported function that was consumed.☆41Updated 2 years ago
- Reflectively load PE☆104Updated 5 years ago
- ☆52Updated 5 years ago
- Windows API/constants, identity, and WinHTTP/WinINet for Go.☆18Updated 2 months ago
- Loads shellcode from a resource file.☆22Updated 6 years ago
- C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.☆30Updated 3 years ago
- RunPE using Hell's Gate technique.☆32Updated 4 years ago
- ☆26Updated 3 years ago
- Simple PoCs for utilizing Windows syscalls in Go☆16Updated 4 years ago
- ☆50Updated 4 years ago
- POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…☆41Updated 3 years ago
- Source files for my posts☆17Updated 2 years ago
- Ntdll Unhooking POC☆19Updated 3 years ago
- Hijack Printconfig.dll to execute shellcode☆98Updated 4 years ago
- Shellcode implementation of Reflective DLL Injection by Golang. Convert DLLs to position independent shellcode☆60Updated 4 years ago
- Demo of process injection, using Nt, direct syscall, etc.☆28Updated 3 years ago
- Process Hollowing Packer☆28Updated 7 years ago
- This repository has been moved to https://github.com/kirides/go-d3d☆52Updated 2 years ago
- An example of how to spawn a process with a spoofed parent PID (Visual C++)☆28Updated 6 years ago
- 横向移动三剑客 ( Lateral movement tools)☆30Updated 3 years ago
- ☆38Updated 4 years ago
- A quick tool for hiding a new process running shellcode.☆57Updated 5 years ago
- ☆38Updated 5 years ago
- Preventing 3rd Party DLLs from Injecting into your Malware☆25Updated 4 years ago
- CSharp Writeups for HackSys Extreme Vulnerable Driver☆43Updated 3 years ago
- Kernel file/process/object tool☆68Updated 4 years ago
- PE file mapping and manipulation package.☆36Updated 3 years ago
- Executes shellcode from a remote server and aims to evade in-memory scanners☆31Updated 5 years ago
- A Study in Obfuscation: Analyzing the effect of various techniques to bypass AV engines☆44Updated 2 years ago
- Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…☆24Updated 5 years ago