th3p1t Goto Github PK

adrena

Software Protector

aika-crypter

Polymorph file protector

amsihook

AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.

apex-crypter

Runtime PE Encryptor

athena

Athena Botnet Source Code

blackbone

Windows memory hacking library

blacklotus

BlackLotus UEFI Windows Bootkit

bootdoor

Former UEFI Firmware Rootkit Replicating MoonBounce / ESPECTRE

byeintegrity-uac

Bypass UAC by hijacking a DLL located in the Native Image Cache

conti_locker

Conti Locker source code

core-packer

Packers for Desktop agents

core-win64

RCS Agent for Windows (64bit)

cronos-rootkit

Cronos is Windows 10/11 x64 ring 0 rootkit. Cronos is able to hide processes, protect and elevate them with token manipulation.

crypt

EXE Crypter

cryptor

Cryptor 3.0

csharp4pentesters

CSharp4Pentesters

data-encoder-crypter-encoded-aes-hidden-startup

The encryption is randomized at every compilation and protected against default bruteforcing.

detoursnt

Detours with just single dependency - NTDLL

directntapi

DirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10

dll-merger

Merging DLLs with a PE32 EXE without LoadLibrary

doubleagent

Zero-Day Code Injection and Persistence Technique

driver-win32

Windows (32bit) agent driver

driver-win64

Windows (64bit) agent driver

drvloader

A post exploitation utility for loading signed kernel drivers using both the undocumented NtLoadDriver function and by directly interfacing with the Windows Service Control Manager (SCM)

eaglemonitorrat

Remote Access Tool Written In C#

fileguard

File crypter and packing utility

foliage

Public variation of FOLIAGE ( original developer )

gh-injector-gui

gh-injector-library

A feature rich DLL injection library.

ghostly

Ghostly is a web based authentication system.