zimnyaa / beepsyscallLinks
An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.
☆15Updated last year
Alternatives and similar repositories for beepsyscall
Users that are interested in beepsyscall are comparing it to the libraries listed below
Sorting:
- A simple rpc2socks alternative in pure Go.☆29Updated last year
- OSED Practice binary☆24Updated last year
- Extension functionality for the NightHawk operator client☆26Updated last year
- PoC MSI payload based on ASEC/AhnLab's blog post☆23Updated 3 years ago
- A mechanism that trampoline hooks functions in x86/x64 systems.☆21Updated last year
- Identify binaries with Authenticode digital signatures signed to an internal CA/domain☆40Updated last year
- single-threaded event driven sleep obfuscation poc for linux☆34Updated 4 months ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Updated last year
- Command and Control Framework using powershell implants☆35Updated 4 months ago
- A utility that can be used to launch an executable with a DLL injected☆19Updated last year
- Parent Process ID Spoofing, coded in CGo.☆23Updated 6 months ago
- This repository contains several AMSI bypasses. These bypasses are based on some very nice research that has been put out by some awesome…☆24Updated 3 years ago
- ☆17Updated 2 years ago
- Proof-of-Concept to evade auditd by tampering via ptrace☆18Updated 2 years ago
- Watches the Downloads folder for any new files and inserts it into Nemesis for analysis.☆15Updated last year
- Beacon Object Files used for Cobalt Strike☆19Updated 2 years ago
- Creation and removal of Defender path exclusions and exceptions in C#.☆31Updated last year
- freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package☆33Updated 2 years ago
- ManageEngine ADManager Command Injection☆11Updated 2 years ago
- Brute Ratel LDAP filtering and sorting tool. Easily take BR log output and pull hostnames for ease of use with other red team tooling. Su…☆39Updated last year
- ☆20Updated last year
- Rust implementation of the Process Herpaderping☆24Updated 2 years ago
- .NET profiler DLL loading can be abused to make a legit .NET application load a malicious DLL using environment variables. This exploit i…☆44Updated last year
- Aggressor script to automatically download and load an arsenal of open source and private Cobalt Strike tooling.☆43Updated last year
- Tool for obtaining information about PPL processes☆16Updated last year
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆26Updated last year
- ☆12Updated 3 years ago
- A lightweight HTTP/HTTPS reverse proxy for efficient, policy-based traffic filtering and redirection.☆46Updated 2 years ago
- ☆47Updated 2 years ago
- ☆22Updated 2 years ago