PoC XLL builder in Python/Nim
☆50Nov 21, 2022Updated 3 years ago
Alternatives and similar repositories for xyrella
Users that are interested in xyrella are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A simple Nim stager (w/ fiber execution)☆21Jan 31, 2022Updated 4 years ago
- Unused DLL hollowing PoC in Nim☆17Jan 31, 2022Updated 4 years ago
- ☆47Jun 21, 2023Updated 3 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 4 years ago
- A small example of loading BOFs in Python with pure reflection☆19Jan 26, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Shellcode Injector that obtains system call opcodes using the Halo's Gate method to evade EDR Hooks.☆20Feb 2, 2022Updated 4 years ago
- A python port of CCob's ThreadlessInject☆25Mar 18, 2023Updated 3 years ago
- Indirect Syscalls: HellsGate in Nim, but making sure that all syscalls go through NTDLL (as in RecycledGate).☆186Feb 12, 2023Updated 3 years ago
- Nemesis agent for Mythic☆28Dec 11, 2025Updated 10 months ago
- Example of using Sleep to create better named pipes.☆40Jul 25, 2023Updated 3 years ago
- Excel Add In Payload Generator☆15Oct 9, 2023Updated 3 years ago
- Splitting and executing shellcode across multiple pages☆102Jun 8, 2023Updated 3 years ago
- A BOF for enumerating version information for DLLs associated for a Beacon process.☆16Nov 23, 2021Updated 4 years ago
- Indirect syscalls + DInvoke made simple.☆95Dec 24, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Implant drop-in for EDR testing☆145Nov 15, 2023Updated 2 years ago
- A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM☆20Updated this week
- Your Windows syscall hooking factory - feat Canterlot's Gate - All accessible over MCP☆136Oct 25, 2026Updated last week
- ☆57Apr 19, 2023Updated 3 years ago
- A simple BOF that disables some logging with NtSetInformationProcess☆14Oct 13, 2023Updated 3 years ago
- ☆138Dec 4, 2023Updated 2 years ago
- malware written for educational purposes☆71Dec 31, 2025Updated 10 months ago
- Various one-off pentesting projects written in Nim. Updates happen on a whim.☆158May 25, 2026Updated 5 months ago
- Start new PowerShell without etw and amsi in pure nim☆158Feb 14, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Sleep Obfuscation☆45Oct 13, 2022Updated 4 years ago
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆195Nov 27, 2024Updated last year
- Cobalt Strike BOF that identifies Attack Surface Reduction (ASR) rules, actions, and exclusion locations☆164Mar 1, 2024Updated 2 years ago
- Programmatically start WebClient from an unprivileged session to enable that juicy privesc.☆80Feb 8, 2023Updated 3 years ago
- A VSCode devcontainer for development of COFF files with batteries included.☆49Jul 10, 2023Updated 3 years ago
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆211Jun 10, 2024Updated 2 years ago
- ☆141Jan 16, 2025Updated last year
- DLL sideloading/proxying with Nim!☆174Dec 4, 2022Updated 3 years ago
- a stage1 DLL loader with sleep obfuscation☆36Dec 27, 2022Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Enable or Disable TokenPrivilege(s)☆16May 17, 2024Updated 2 years ago
- ☆323Jun 28, 2023Updated 3 years ago
- BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released a…☆400Jan 9, 2024Updated 2 years ago
- A lexer and parser for Sleep☆21Feb 20, 2026Updated 8 months ago
- Running .NET from VBA☆147Feb 11, 2023Updated 3 years ago
- A collection of offensive Nim example code☆74Dec 21, 2021Updated 4 years ago
- A web assembly (WASM) phishing lure generator based on pre-built templates and written in Rust with some GenAI assistance. W.A.L.K. aims …☆103Sep 5, 2024Updated 2 years ago