zimnyaa / insomniaLinks
a stage1 DLL loader with sleep obfuscation
☆36Updated 3 years ago
Alternatives and similar repositories for insomnia
Users that are interested in insomnia are comparing it to the libraries listed below
Sorting:
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆79Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆119Updated last month
- Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.☆75Updated 6 months ago
- Section-based payload obfuscation technique for x64☆64Updated last year
- Sleep Obfuscation☆45Updated 3 years ago
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆138Updated 3 years ago
- a demo module for the kaine agent to execute and inject assembly modules☆41Updated last year
- A process injection technique using only thread context manipulation☆41Updated 2 years ago
- A small NtCreateUserProcess PoC that spawns a Command prompt.☆101Updated 3 years ago
- A work in progress BOF/COFF loader in Rust☆50Updated 2 years ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆72Updated last year
- Windows User-Mode Shellcode Development Framework (WUMSDF)☆123Updated 2 months ago
- A more reliable way of resolving syscall numbers in Windows☆54Updated 2 years ago
- Malware?☆76Updated 3 months ago
- Get your data from the resource section manually, with no need for windows apis☆66Updated last year
- early cascade injection PoC based on Outflanks blog post, in rust☆62Updated last year
- Splitting and executing shellcode across multiple pages☆103Updated 2 years ago
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆30Updated last year
- Halos Gate-based NTAPI Unhooker☆52Updated 3 years ago
- Piece of code to detect and remove hooks in IAT☆65Updated 3 years ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆63Updated last year
- ☆100Updated 2 years ago
- Vectored Exception Handling Squared☆29Updated last month
- RunPE adapted for x64 and written in C, does not use RWX☆28Updated last year
- API Hammering with C++20☆50Updated 3 years ago
- ☆86Updated last year
- Callstack spoofing using a VEH because VEH all the things.☆23Updated 10 months ago
- Shellcode capable of bypassing EAF / IAF mitigations☆28Updated 2 years ago
- EvtPsst☆55Updated 2 years ago