
WTSRM2
Header-only C++17 library for evasive Windows development: compile-time API hashing, DLL unhooking, hardware breakpoint clearing, VEH removal, and…

Header-only C++17 library for evasive Windows development: compile-time API hashing, DLL unhooking, hardware breakpoint clearing, VEH removal, and…

IDA python script for deobfuscating Astaroth/Guildma injector DLL

AAD related enumeration in Nim

freeBokuLoader fork which targets and frees Metsrv's initial reflective DLL package

CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive

Signtool for expired certificates

Lockbit3.0 Microsoft Defender MpClient.dll DLL Hijacking PoC

Lateral Movement Using DCOM and DLL Hijacking

Windows 10 DLL Injector via Driver utilizing VAD and hiding the loaded driver

For when DLLMain is the only way

Execute shellcode files with rundll32

A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege

Injects x64 managed DLLs into GUI processes via SetWindowsHook, with a modular C# payload runner and LSASS dump POC for red-team/offensive Windows…

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

A reference of Windows API function calls, including functions for file operations, process management, memory management, thread management,…

Generate a proxy dll for arbitrary dll

Practical Windows malware development course: API hashing, DLL sideloading, shellcode execution, PE manipulation, payload hosting, and delivery labs.