
RottenPotatoNG
New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.

New version of RottenPotato as a C++ DLL and standalone C++ binary - no need for meterpreter or other tools.

A Bind Shell Using the Fax Service and a DLL Hijack

Code execution/injection technique using DLL PEB module structure manipulation

Generate a proxy dll for arbitrary dll

Adaptive DLL hijacking / dynamic export forwarding - EAT preserve

WptsExtensions.dll for exploiting DLL hijacking of the task scheduler.

Inject DLLs into the explorer process using icons

PE loader with various shellcode injection techniques

For when DLLMain is the only way

A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techniques.

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具,它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的代码,帮助红队人员更方便快…

DLL Password Filter Implant with Exfiltration Capabilities

Remote DLL Injection with Timer-based Shellcode Execution

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package

Injects x64 managed DLLs into GUI processes via SetWindowsHook, with a modular C# payload runner and LSASS dump POC for red-team/offensive Windows…