Discover @Kara-4search Open Source projects

@Kara-4search

Kara-4search

Stars
431
Global Rank 65,811 (Top 3 %)
Followers 204
Registered over 3 years ago
Most used languages

C#
100.0 %
Location 🇺🇸 United States
Country Total Rank 16,730
Country Ranking

C#
560

NewNtdllBypassInlineHook_CSharp

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

DInvoke_shellcodeload_CSharp

ShellCodeLoader via DInvoke

HookDetection_CSharp

MappingInjection_CSharp

MappingInjection via csharp

SysCall_ShellcodeLoad_Csharp

Load shellcode via syscall

Fiber_ShellcodeExecution

Using fibers to execute shellcode in a local process via csharp

PEB-PPIDspoofing_Csharp

Command line & PPID spoofing

BypassETW_CSharp

Bypassing ETW with Csharp

EarlyBirdInjection_CSharp

Inject shellcode into process via "EarlyBird"

WindowsEventLogsBypass_Csharp

Bypass windows eventlogs & Sysmon

ThreadHijacking_CSharp

Process inject technique "Thread hijacking" via csharp

BypassAMSI_CSharp

APC_ShellcodeExecution_CSharp

Shellcode Load or execute via "APC technic"

HellgateLoader_CSharp

Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.

Simple_ShellCodeLoader_CSharp

A Simple ShellcodeLoader

ProcessHollowing_CSharp

ProcessHollowing via csharp

FullDLLUnhooking_CSharp

Unhook DLL via cleaning the DLL 's .text section

AddressOfEntryPoint_Hijack_CSharp

Shellcode injection or execution via AddressOfEntryPoint hijack.

JIT_DEMO_Csharp

A little JIT demo to help you understander how JIT works

CreateThreadpoolWait_ShellcodeExecution_CSharp

Shellcode execution via CreateThreadpoolWait with Csharp

AMSICheck_CSharp

A tool to detect the integrity of AmsiScanbuffer in memory ，and defend AMSI bypass

ProjectPics

For temp pictures

test