timwhitez/Doge-BlockDLLs timwhitez/Doge-BlockDLLs

  • Stars
    star
    21
  • Rank 1,084,038 (Top 22 %)
  • Language
    Go
  • Created over 3 years ago
  • Updated about 3 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
timwhitez/Doge-BlockDLLs
github

timwhitez

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Preventing 3rd Party DLLs from Injecting into your Malware

More Repositories

1

crawlergo_x_XRAY

360/0Kee-Team/crawlergo动态爬虫结合长亭XRAY扫描器的被动扫描功能
Python
1,168
star
2

Cobalt-Strike-Aggressor-Scripts

Cobalt Strike Aggressor 插件包
C
664
star
3

Doge-Loader

🐶Cobalt Strike Shellcode Loader by Golang
Go
279
star
4

Doge-Gabh

GetProcAddressByHash/remap/full dll unhooking/Tartaru's Gate/Spoofing Gate/universal/Perun's Fart/Spoofing-Gate/EGG/RecycledGate/syswhisper/RefleXXion golang implementation
Go
271
star
5

Doge-XSS-Phishing

xss钓鱼，cna插件配合php后端收杆
JavaScript
266
star
6

rad-xray

xray+rad批量主动扫描
Python
217
star
7

Frog-Auth

🐸Unauthorized Detection Framework未授权访问检测框架
Python
156
star
8

Frog-checkCDN

批量检查目标是否为cdn
Python
133
star
9

Frog-Fp

🐸fingerprint detect framework 批量深度指纹识别框架
Python
114
star
10

Doge-Assembly

Golang evasion tool, execute-assembly .Net file
Go
88
star
11

Frog-Submon

🐸Subdomain Monitor, 子域名监控
Python
75
star
12

Doge-Defense-Evasion-Ref

Defense Evasion & Bypass AntiVirus reference
74
star
13

ReturnGate

ReturnGate, just like HellsGate.
Go
66
star
14

killProcessPOC

use aswArPot.sys to kill process
Go
62
star
15

Doge-MemX

Golang implementation of Reflective load PE from memory
Go
59
star
16

doge-getsys

An easy way to getsystem by golang.
Go
56
star
17

Doge-sRDI

Shellcode implementation of Reflective DLL Injection by Golang. Convert DLLs to position independent shellcode
Go
53
star
18

Doge-Persistence-Platform

后渗透持久化控制平台; Windows Persistence Platform;
45
star
19

Git-Daily

Github Security Daily Repository.
43
star
20

Doge-CSBridge

CS http Dynamic Encrypt Bridge.
Go
42
star
21

Spoofing-Gate

(Hellsgate|Halosgate|Tartarosgate)+Spoofing-Gate. Ensures that all systemcalls go through ntdll.dll
Go
41
star
22

gobusterdns

lite version of gobuster. Only subdomain brute. 内网轻量化子域名爆破工具
Go
40
star
23

Bof2PIC

BOF/COFF obj file to PIC(shellcode). by golang
C
35
star
24

memmod

Fork & modify of Wireguard's Memmod
Go
32
star
25

Doge-CLRLoad

load assembly executable file in memory
Go
30
star
26

Doge-ScreenShot

desktop screenshot
Go
30
star
27

about-anti-honeypot

关于蜜罐的一些微小的统计工作
JavaScript
30
star
28

Doge-AMSI-patch

golang amsi bypass
Go
30
star
29

Doge-DumpMem

dump lsass
Go
30
star
30

Doge-RecycledGate

Golang implementation of Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll;
Go
29
star
31

Doge-Hide

windows API to hide console window by golang
Go
28
star
32

Doge-Direct-Syscall

Golang Direct Syscall
Assembly
28
star
33

AddressOfEntryPoint-injection

x64 version
Go
27
star
34

Doge-SelfDelete

Golang implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
Go
26
star
35

Doge-PX

DPX - the Doge Packer for eXecutables
Go
26
star
36

Doge-Process-Injection

Demo of process injection, using Nt, direct syscall, etc.
Go
26
star
37

ScareCrow-Common

ScareCrow loader binary source which easier to read and learn
Go
25
star
38

iSliver

Learning notes of amazing Sliver C2 project.
Go
24
star
39

Doge-Whisper

golang implementation of Syswhisper2/Syswhisper3
Go
23
star
40

Doge-AliveCheck

Use ICMP requests to check the alive subnet.
Go
23
star
41

Doge-newSyscall

use shellcode as asm function
Go
22
star
42

Doge-EGGCall

Like Hell's Gate but more EGG :)
Go
21
star
43

CLR-RWX

Load CLR to get RWX 通过加载clr在自身内存中产生rwx空间
Go
21
star
44

Doge-RL

Reflective DLL injection Execution
Go
20
star
45

find-subdomain-by-xray

利用xray高级版批量收集子域名
Python
19
star
46

JmpUnhook

Ntdll Unhooking POC
Go
18
star
47

Doge-AddSSP

Load ssp dll golang implementation
Go
17
star
48

Cobalt-Strike-det

Cobalt Strike teamserver detection.
Python
17
star
49

Doge-HeapAlloc

Go
15
star
50

Doge-Misc

杂 物 收 纳
Go
15
star
51

Freeze-Common

Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
Go
14
star
52

Doge-PX_GUI

DPX工具界面展示
14
star
53

Cafe

程序员在家饮品制作指南。Programmer's guide about how to make drinks at home (Chinese only).
13
star
54

Doge-Persist

Windows Persistence Collection
Go
12
star
55

Etwti-UnhookPOC

Etwti-UnhookPOC just for test
Go
11
star
56

Doge-Unhook

DLL Unhooking
Go
11
star
57

Doge-BadUSB

开源！自主设计的badusb电路板
10
star
58

PyC2-demo

从入门到放弃的产物，学习过程中用python实现的一个单点c2基本功能
Python
10
star
59

sandbox-data-collection

云沙箱数据采集(19年刚学go的远古项目，勿吐槽)
Go
10
star
60

Go-VEH

VEH hook
Go
10
star
61

Divide-Conquer-demo

Divide and Conquer - A technique to bypass NextGen AV
Go
9
star
62

Doge-UnhookEtw

unhook etw by golang
Go
9
star
63

Doge-Obf

golang String Obfuscate
Go
9
star
64

Doge-WhereAmI

Golang implementation of boku7/whereami
Go
8
star
65

ice-strike-design

Ice-Strike C2界面设计分享
8
star
66

Doge-memLDR

memory dll loader
Go
8
star
67

Doge-FindFirewallPorts

Golang implementation of FindFirewallPorts by 清水川崎
Go
7
star
68

Frog-CertDomain

Get CommonName and DNS domains from SSL cert.
Go
7
star
69

Doge-NpThief

Grab unsaved Notepad contents
Go
7
star
70

CVE-2018-8639-EXP

CVE-2018-8639-EXP
6
star
71

Doge-RWXenum

Enumerating RWX Protected Memory Regions.
Go
6
star
72

Doge-OTP

Google Authenticator OTP
Go
6
star
73

Argue-like-Cobalt-Strike

Argue like Cobalt Strike
C++
5
star
74

Doge-hookbypass

C++
5
star
75

Doge-TypeUnhook

type ntdll.dll for dll unhooking
Go
5
star
76

Doge-ReMap

Unhook full dll by Section ReMap
Go
5
star
77

ACG-BOF

Preventing 3rd Party DLLs from Injecting into your Malware
C
5
star
78

fingerprint-scanner-research

开源指纹识别项目调研
5
star
79

Mouse-Control

just for fun
Go
4
star
80

argument-spoofing

argue like Cobalt Strike
4
star
81

VEH-FuncObf

function call Obfuscator using veh hook
C
4
star
82

timwhitez

about me
4
star
83

Doge-ByteBinStr

Byte<->BinaryString convert
Go
4
star
84

powershell-killav

use ps1 to kill some antivirus
PowerShell
3
star
85

v4-v6

ipv4 address maps to ipv6 address
Go
3
star
86

useless-webshell

比小马大比大马小，俗称中马
PHP
3
star
87

BinHol

Binary Hollowing
Go
3
star
88

Sub-Filter

过滤跑出来的子域名
Python
3
star
89

LockWorkStation

Go
2
star
90

str2ntlm

string to ntlm hash string
Go
2
star
91

Garmin-Async

自动化使用dailysync.vyzt.dev定期同步佳明国内与国际版账号
Go
2
star
92

AD-CoT

Advanced Dynamic Chain-of-Thought Framework Prompt
2
star
93

zoomeye-search

导入domain批量zoomeye查询
Python
1
star
94

Sec_MindMap

一些思维导图记录
1
star
95

META-ATT-CK-Framework

A comprehensive matrix of actionable offensive security techniques based on ATT&CK Framework
1
star