Popular repositories Loading

1. FilelessPELoader FilelessPELoader Public

   Loading Remote AES Encrypted PE in memory , Decrypted it and run it

   C++ 892 186

2. Shellcode-Hide Shellcode-Hide Public

   This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

   C++ 405 105

3. TakeMyRDP TakeMyRDP Public

   A keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.ex…

   C++ 380 61

4. D1rkLdr D1rkLdr Public

   Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscall instruction address resolving at run time

   C++ 303 60

5. UnhookingPatch UnhookingPatch Public

   Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

   C++ 298 50

6. NTDLLReflection NTDLLReflection Public

   Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll , and trigger exported APIs from the export table

   C++ 293 44