wsummerhill / CSharp-Alt-Shellcode-Callbacks
A collection of (even more) alternative shellcode callback methods in CSharp
☆67Updated 3 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for CSharp-Alt-Shellcode-Callbacks
- Alternative Shellcode Execution Via Callbacks in C# with P/Invoke☆72Updated last year
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆78Updated last year
- A .NET Runtime for Cobalt Strike's Beacon Object Files☆59Updated last month
- ☆59Updated 4 months ago
- Lateral Movement via the .NET Profiler☆76Updated this week
- Modified versions of the Cobalt Strike Process Injection Kit☆88Updated 10 months ago
- C# havoc implant☆96Updated last year
- ☆119Updated last year
- Click Once + App Domain☆62Updated 11 months ago
- Lockless BOF☆62Updated 9 months ago
- My implementation of Halo's Gate technique in C#☆53Updated 2 years ago
- ☆87Updated 2 months ago
- Simple BOF to read the protection level of a process☆104Updated last year
- A simple BOF that frees UDRLs☆109Updated 2 years ago
- Reasonably undetected shellcode stager and executer.☆35Updated 2 months ago
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆86Updated 2 years ago
- HelpSystems Nanodump, but wrapped in powershell via Invoke-ReflectivePEInjection☆53Updated 2 years ago
- ☆122Updated 11 months ago
- A third-party Gopher Assassin for the Havoc Framework.☆44Updated 10 months ago
- Just another C2 Redirector using CloudFlare.☆78Updated 6 months ago
- ☆108Updated last year
- C# Port of LdapRelayScan☆77Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆149Updated last year
- ☆74Updated 7 months ago
- Cobalt Strike BOF for quser.exe implementation using Windows API☆83Updated last year
- A C# Solution Source Obfuscator for avoiding AV signatures with minimal user interaction. Powered by the Roslyn C# library.☆70Updated 4 years ago
- In-memory sleep encryption and heap encryption for Go applications through a shellcode function.☆39Updated 10 months ago
- ☆76Updated last year
- ☆146Updated last year
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆66Updated last year