whokilleddb / A-Study-in-Obfuscation

Related projects ⓘ

Alternatives and complementary repositories for A-Study-in-Obfuscation

• bananabr / Givemeahand
  A PoC tool for exploiting leaked process and thread handles
  ☆30Updated 9 months ago
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆30Updated 2 years ago
• PorLaCola25 / PPID-Spoofing
  POC of PPID spoofing using NtCreateUserProcess with syscalls to create a suspended process and performing process injection by overwritti…
  ☆38Updated 3 years ago
• aaaddress1 / knownDlls_Poison
  ☆26Updated 2 years ago
• Wra7h / PEResourceInject
  ☆53Updated 2 years ago
• arsium / ShellCodeExec
  My personal shellcode loader
  ☆32Updated last year
• elddy / Windows-NTAPI-Injector
  Inject shellcode to process using Windows NTAPI for bypassing EDRs and Antiviruses
  ☆40Updated 3 years ago
• hackerhouse-opensource / envschtasksuacbypass
  Bypass UAC elevation on Windows 8 (build 9600) & above.
  ☆53Updated 2 years ago
• bharadwajyas / ppdump-public
  Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…
  ☆22Updated 4 years ago
• SaadAhla / BlockNonMSModules
  Set the process mitigation policy for loading only Microsoft Modules , and block any userland 3rd party modules
  ☆42Updated last year
• xpn / ObjectOverloadingPOC
  ☆58Updated 2 years ago
• Kara-4search / HookDetection_CSharp
  HookDetection
  ☆44Updated 3 years ago
• ReCryptLLC / CVE-2022-42045
  ☆37Updated last year
• TheKevinWang / HellsRunPE
  RunPE using Hell's Gate technique.
  ☆31Updated 3 years ago
• NUL0x4C / ManualRsrcDataFetching
  Get your data from the resource section manually, with no need for windows apis
  ☆53Updated last month
• Cobalt-Strike / obfuscator-llvm
  ☆37Updated 10 months ago
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆39Updated 11 months ago
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆53Updated 2 years ago
• Allevon412 / ClassicAPIUnhooking
  ☆15Updated 2 years ago
• OtterHacker / CoffLoader
  ☆48Updated last year
• plackyhacker / Unhook-BitDefender
  Unhooks Bit Defender from NTDLL and KERNELBASE using a classic technique.
  ☆53Updated last year
• Hagrid29 / herpaderply_hollowing
  Herpaderply Hollowing - a PE injection technique, hybrid between Process Hollowing and Process Herpaderping
  ☆45Updated 2 years ago
• farinap5 / bitmap4shell
  A (quite) simple steganography algorithm to hide shellcodes within bitmap image.
  ☆21Updated 6 months ago
• JetP1ane / Artemis
  Artemis - C++ Hell's Gate Syscall Implementation
  ☆30Updated last year
• CitrusIce / ksc4cpp
  ksc4cpp is a shellcode framework for windows kernel based on C++
  ☆21Updated last year
• oXis / DoublePulsarPayload
  C++ implementation of DOUBLEPULSAR usermode shellcode. Yet another Reflective DLL loader.
  ☆29Updated 3 years ago
• trustedsec / Windows-MS-LSAT-RPC-Example
  Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD
  ☆24Updated 10 months ago
• baiyies / CrossInject
  32 bit process inject shellcode to 32 bit process and 64 bit process
  ☆28Updated last year