rajatsharma1337 Goto Github PK

atomldr-copy

A DLL loader with advanced evasive features

bokuloader

A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!

cs-remote-ops-bof

cs-situational-awareness-bof

Situational Awareness commands implemented using Beacon Object Files

dcomhijack

Lateral Movement Using DCOM and DLL Hijacking

edrsilencer

A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.

elusivemice

Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind

funcaddresspro

A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.

misc

miscellaneous codes

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poolpartybof

A beacon object file implementation of PoolParty Process Injection Technique.

proxy-dll-loads

A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.

realblindingedr

Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThreadNotifyRoutine Callback、PsSetLoadImageNotifyRoutine Callback...

reflexxion

RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature array.

wfh

Automate Dllsideloads discovery