
windows-api-function-cheatsheets
A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

Converts a EXE into DLL

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs

LoadLibrary for offensive operations

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

Robber is open source tool for finding executables prone to DLL hijacking

Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…

Windows privilege escalation discovery tool that parses Process Monitor boot logs to identify DLL hijacking, weak ACLs, and other elevation paths,…

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

PE loader with various shellcode injection techniques

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Generate a proxy dll for arbitrary dll

DLL sideloading/proxying with Nim!

find dll base addresses without PEB WALK

Automated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…