works but not work, cao!
☆24Sep 4, 2021Updated 5 years ago
Alternatives and similar repositories for beacon_hook_bypass_memscan
Users that are interested in beacon_hook_bypass_memscan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A *very* imperfect attempt to correlate Kernel32 function calls to native API (Nt/Zw) counterparts/execution flow.☆28Dec 16, 2021Updated 4 years ago
- ☆18Aug 15, 2021Updated 5 years ago
- RDI implementation in Nim☆64Dec 12, 2020Updated 5 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- roundrobin with configurable rotating strategies☆18Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 从入门到放弃的产物，学习过程中用python实现的一个单点c2基本功能☆11Mar 11, 2020Updated 6 years ago
- Terminate the eventlog thread to disable the windows eventlog☆21Apr 1, 2020Updated 6 years ago
- A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP☆37Jul 27, 2021Updated 5 years ago
- 提取DC日志，快速获取域用户对应IP地址☆19Sep 2, 2021Updated 5 years ago
- Process doppelganging POC using direct system calls, PPID spoofing and dropbox as an external delivery channel for the payload.☆17Jan 7, 2021Updated 5 years ago
- ☆108Jul 24, 2023Updated 3 years ago
- wordpress batch brute force☆11Sep 21, 2021Updated 5 years ago
- MiniDumpWriteDump behavior modification hook☆50Feb 15, 2021Updated 5 years ago
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆30Feb 22, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- BOF/COFF obj file to PIC(shellcode). by golang☆40Sep 28, 2022Updated 4 years ago
- Tool to get NT system shell .☆24Jul 12, 2021Updated 5 years ago
- This project is created for research into antivirus evasion by unhooking.☆17Sep 2, 2021Updated 5 years ago
- Custom implementation of DbgHelp's MiniDumpWriteDump function. Uses static syscalls to replace low-level functions like NtReadVirtualMemo…☆129Jan 18, 2022Updated 4 years ago
- Golang AMSI Bypass☆23Oct 17, 2021Updated 5 years ago
- Implementation of b4rtiks's SharpMiniDump using NTFS transactions to avoid writting the minidump to disk and exfiltrating it via HTTPS us…☆68Nov 14, 2020Updated 5 years ago
- Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used☆90Aug 26, 2021Updated 5 years ago
- An easy tool to disable and enable windows defender protections☆106Mar 20, 2022Updated 4 years ago
- My experience using Windows API for offensive purposes☆17Jul 10, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Cobalt Strike teamserver detection.☆16Apr 26, 2021Updated 5 years ago
- EDR Evasion - Combination of SwampThing - TikiTorch☆29May 28, 2020Updated 6 years ago
- leaking net-ntlm with webdav☆28Feb 23, 2021Updated 5 years ago
- ☆73Jul 23, 2021Updated 5 years ago
- Generic impersonation and privilege escalation with Golang. Like GenericPotato both named pipes and HTTP are supported.☆115Jun 7, 2021Updated 5 years ago
- Rust procedural macro to insert a few asm! calls full of junk instructions in between every line of code.☆13May 27, 2023Updated 3 years ago
- Pure Go lang cryptor and shellcode injector☆19Feb 25, 2021Updated 5 years ago
- Small utility package for manipulating Windows process tokens☆24Apr 26, 2022Updated 4 years ago
- Phantom DLL Hollowing method implemented in modmap☆18Jun 9, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A shellcode function to encrypt a running process image when sleeping.☆336Sep 11, 2021Updated 5 years ago
- A collection of scripts used to support an OffSecOps pipeline.☆15Jan 31, 2021Updated 5 years ago
- A repo to hold any bypasses I work on/study/whatever☆20Dec 30, 2020Updated 5 years ago
- Thanks to @d35ha☆12Aug 16, 2021Updated 5 years ago
- change domain machine password locally or remotely☆11Sep 10, 2021Updated 5 years ago
- Search msDS-AllowedToActOnBehalfOfOtherIdentity☆35Jan 17, 2022Updated 4 years ago
- 感染PE文件的病毒学习过程☆32Jan 14, 2021Updated 5 years ago