an0x03e8 Goto Github PK

obfloader

MAC, IPv4, UUID shellcode Loaders and Obfuscators to obfuscate the shellcode and using some native API to converts it to it binary format and loads it.

offensive-rust

offensiverust

Rust Weaponization for Red Team Engagements.

poolparty

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

pplfault

protectmytooling

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

rust-windows-shellcode

Windows shellcode development in Rust

rust_syscalls

Single stub direct and indirect syscalling with runtime SSN resolving for windows.

rust_tips_and_tricks

Rust For Windows Cheatsheet

rustyprocessinjectors

Just some Rust process injector POCs, nothing weird.

rwxmeme

State of the art DLL injector that took 20 minutes to make

shellcode-hide

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

shellcodestdio

An extensible framework for easily writing compiler optimized position independent x86 / x64 shellcode for windows platforms.

shellcodetemplate

An easily modifiable shellcode template for Windows x64/x86

silentmoonwalk

PoC Implementation of a fully dynamic call stack spoofer

sourcepoint

SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.

split

Apply a divide and conquer approach to bypass EDRs

stager_libpeconv

A basic meterpreter protocol stager using the libpeconv library by hasherezade for reflective loading

stealth-win

stfuedr

Silence EDRs by removing kernel callbacks

sweetdreams

Implementation of Advanced Module Stomping and Heap/Stack Encryption

syswhispers3

SysWhispers on Steroids - AV/EDR evasion via direct system calls.

tartarus-tpallocinject

threadlessinject

Threadless Process Injection using remote function hooking.

threadlessinject-bof

BOF implementation of @_EthicalChaos_'s ThreadlessInject project. A novel process injection technique with no thread creation, released at BSides Cymru 2023.

tikitorch

Process Injection

unhookingpatch

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

unwinder

Another approach to thread stack spoofing.

vx-api

Collection of various malicious functionality to aid in malware development

wfh