zimnyaa / insomniaLinks
a stage1 DLL loader with sleep obfuscation
☆36Updated 3 years ago
Alternatives and similar repositories for insomnia
Users that are interested in insomnia are comparing it to the libraries listed below
Sorting:
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆79Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated 2 years ago
- ☆38Updated 8 months ago
- a demo module for the kaine agent to execute and inject assembly modules☆42Updated last year
- Section-based payload obfuscation technique for x64☆64Updated last year
- Splitting and executing shellcode across multiple pages☆103Updated 2 years ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆74Updated last year
- Identifies LOLDrivers that are not blocked by the active HVCI policy — ideal for BYOVD scenarios.☆73Updated 5 months ago
- API Hammering with C++20☆49Updated 3 years ago
- A process injection technique using only thread context manipulation☆39Updated 2 years ago
- Malware?☆76Updated 2 months ago
- RunPE adapted for x64 and written in C, does not use RWX☆28Updated last year
- Sleep Obfuscation☆45Updated 3 years ago
- A small NtCreateUserProcess PoC that spawns a Command prompt.☆99Updated 3 years ago
- ☆100Updated 2 years ago
- Callstack spoofing using a VEH because VEH all the things.☆23Updated 9 months ago
- PIC shellcode (C/C++) development toolkit designed for malware developers.☆113Updated last week
- A work in progress BOF/COFF loader in Rust☆51Updated 2 years ago
- ☆50Updated last year
- Find jmp gadgets for call stack spoofing.☆72Updated 3 months ago
- DLL proxy load example using the Windows thread pool API, I/O completion callback with named pipes, and C++/assembly☆62Updated last year
- early cascade injection PoC based on Outflanks blog post, in rust☆61Updated last year
- ☆83Updated last year
- ☆42Updated 3 years ago
- idk man this was the default github name☆35Updated 2 years ago
- ☆101Updated last year
- A more reliable way of resolving syscall numbers in Windows☆52Updated last year
- Single stub direct and indirect syscalling with runtime SSN resolving for windows.☆138Updated 3 years ago
- Rewrite to fit my needs☆32Updated last year
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆83Updated last year