There are no reviews yet. Be the first to send feedback to the community and the maintainers!
donut
Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parametersDInvoke
Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.CertStealer
A .NET tool for exporting and importing certificates without touching disk.GhostLoader
GhostLoader - AppDomainManager - Injection - 攻壳机动队EasyNet
Simple packer for arbitrary data using only .NET API calls. Produces a unique signature with every usage. Standalone program and library. Algorithm: Data <-> GZip <-> AES-256 <-> Base64.Manager
Library of tools and examples for loading/bootstrapping managed code from unmanaged code in .NETModuleMonitor
Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Injection attacks.ProcessManager
ps-like .NET Assembly for enumerating processes on the current machine or a remote machine.AsyncRAT-VB.NET
Remote Administration Tool For Windows VB.NETbeercode
Free beerware-quality code in exchange for beer money (if you are so inclined). ;-)TDL
Driver loader for bypassing Windows x64 Driver Signature Enforcementself-morphing-csharp-binary
C# binary that mutates its own code, encrypts and obfuscates itself on runtimeClrGuard
Vx-Suites
Love Open Source and this site? Check out how you can help us