zimnyaa / nim-noload-dll-hollowing
Unused DLL hollowing PoC in Nim
☆16Updated 2 years ago
Alternatives and similar repositories for nim-noload-dll-hollowing:
Users that are interested in nim-noload-dll-hollowing are comparing it to the libraries listed below
- A simple Nim stager (w/ fiber execution)☆16Updated 2 years ago
- Small tool to play with IOCs caused by Imageload events☆42Updated last year
- Windows x64 Process Injection via Ghostwriting with Dynamic Configuration☆28Updated 3 years ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆46Updated 3 months ago
- Run python from a single exe☆34Updated 2 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆69Updated last year
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆38Updated last year
- ☆42Updated last year
- Sleep Obfuscation☆42Updated 2 years ago
- Your NTDLL vaccine from modern direct syscall methods.☆35Updated 2 years ago
- A way to extract tickets in case I need to purge and restore tickets on the fly.☆17Updated 8 months ago
- A post-exploitation strategy for persistence and egress from networks utilizing authenticated web proxies☆32Updated 2 years ago
- PoC XLL builder in Python/Nim☆42Updated 2 years ago
- Bypass UAC elevation on Windows 8 (build 9600) & above.☆54Updated 2 years ago
- A work in progress BOF/COFF loader in Rust☆46Updated last year
- Resolve WinAPI func. Custom GetProcAddress and GetModuleHandle written in Nim☆32Updated 3 years ago
- An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.☆54Updated 2 years ago
- ☆37Updated 3 years ago
- Another AMSI bypass - but in C++.☆23Updated last year
- A PoC~ish of https://elastic.github.io/security-research/malware/2022/01/01.operation-bleeding-bear/article/☆30Updated 10 months ago
- Self Delete DLL☆23Updated 11 months ago
- An example of COM hijacking using a proxy DLL.☆25Updated 3 years ago
- Hooked create process injection for meterpreter☆23Updated 3 years ago
- Extension functionality for the NightHawk operator client☆26Updated last year
- ☆42Updated last year
- Beacon Object Files (not Buffer Overflows)☆53Updated last year
- A method to execute shellcode using RegisterWaitForInputIdle API.☆52Updated last year