nul0x4c Goto Github PK

apcldr

Payload Loader With Evasion Features

asmlogger

asm keylogger that handles special characters and writes to a file

atomldr

A DLL loader with advanced evasive features

atompepacker

A Highly capable Pe Packer

ctaes

Simple constant-time AES implementation

deleteshadowcopies

Deleting Shadow Copies In Pure C++

edrs

ekko

Sleep Obfuscation

etwsessionhijacking

A Poc on blocking Procmon from monitoring network events

fetchpayloadfromdummyfile

Construct a payload at runtime using an array of offsets

foliage

Public variation of FOLIAGE ( original developer )

gp

using the gpu to hide your payload

hellshell

transform your payload into ipv4/ipv6/mac arrays

herpaderping

Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the intentions of a process.

injection

Windows process injection methods

kaynldr

KaynLdr is a Reflective Loader written in C/ASM

kcthijacklib

using the kct to run your shellcode the apt style

knowndllunhook

Replace the .txt section of the current loaded modules from \KnownDlls\ to bypass edrs

manualrsrcdatafetching

Get your data from the resource section manually, with no need for windows apis

norunpi

Run Your Payload Without Running Your Payload

nul0x4c

openbsd

Source code pulled from OpenBSD for LibreSSL - this includes most of the library and supporting code. The place to contribute to this code is via the OpenBSD CVS tree. Please mail patches to [email protected], instead of submitting pull requests, since this tree is often rebased.

perunsfart

replace and unhook ntdll from a suspended process

process_doppelganging

My implementation of enSilo's Process Doppelganging (PE injection technique)

process_ghosting

Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted file

recyclebinpersistence

using the Recycle Bin to insure persistence

syscallslib

a library that automates some clean syscalls to make it easier to implement

t.d.p.

Using Thread Description To Hide Shellcodes

terraldr

A Payload Loader Designed With Advanced Evasion Features

toasterloader

just a stupid way to run a payload