winterknife / PINKPANTHERLinks
Windows x64 handcrafted token stealing kernel-mode shellcode
☆508Updated last year
Alternatives and similar repositories for PINKPANTHER
Users that are interested in PINKPANTHER are comparing it to the libraries listed below
Sorting:
- PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.☆587Updated last year
- Venom is a library that meant to perform evasive communication using stolen browser socket☆382Updated last year
- UAC bypass by abusing RPC and debug objects.☆618Updated last year
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆637Updated 2 years ago
- Various ways to execute shellcode☆491Updated last year
- PoCs and tools for investigation of Windows process execution techniques☆916Updated 2 months ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆521Updated 2 years ago
- A Highly capable Pe Packer☆701Updated 2 years ago
- This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.☆501Updated last week
- Dump the memory of a PPL with a userland exploit☆873Updated 2 years ago
- Enumerating and removing kernel callbacks using signed vulnerable drivers☆563Updated 2 years ago
- Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs☆750Updated last year
- It's a go variant of Hells gate! (directly calling windows kernel functions, but from Go!)☆509Updated 2 years ago
- ☆481Updated 2 years ago
- Transacted Hollowing - a PE injection technique, hybrid between ProcessHollowing and ProcessDoppelgänging☆549Updated last year
- Shellcode injection technique. Given as C++ header, standalone Rust program or library.☆702Updated last year
- KaynLdr is a Reflective Loader written in C/ASM☆540Updated last year
- A Payload Loader Designed With Advanced Evasion Features☆512Updated 2 years ago
- some gadgets about windows process and ready to use :)☆587Updated last year
- Project Ares is a Proof of Concept (PoC) loader written in C/C++ based on the Transacted Hollowing technique☆337Updated 3 years ago
- Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …☆744Updated last year
- Small and convenient C2 tool for Windows targets. [ Русский -- значит нахуй! ]☆606Updated 3 years ago
- Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll☆465Updated 3 years ago
- An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…☆1,024Updated 2 years ago
- Threadless Process Injection using remote function hooking.☆755Updated 8 months ago
- Convert shellcode into different formats!☆353Updated 2 years ago
- Cobalt Strike UDRL for memory scanner evasion.☆937Updated 11 months ago
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆675Updated last year
- Sandman is a NTP based backdoor for red team engagements in hardened networks.☆792Updated last year
- A method of bypassing EDR's active projection DLL's by preventing entry point exection☆1,144Updated 4 years ago