binlux Goto Github PK

anti-vm

Detect virtual machine environment

atompepacker

A Highly capable Pe Packer

bitb

Browser In The Browser (BITB) Templates

bitrat-hvnc-rat-remote-control-av-bypass

The keylogger can save keystrokes in stealth mode that works online or offline in both.

bookcars

Car Rental Platform with Mobile App

celeborn

Userland API Unhooker Project

clrdumper

Dump .net assembly from a native loader which uses ClrCreateinstance

dcmb

Dont Call Me Back - Dynamic kernel callback resolver.

dll-hijack-by-proxying

Exploiting DLL Hijacking by DLL Proxying Super Easily

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

easy-hwid-spoofer

基于内核模式的硬件信息欺骗工具

file-to-byte-array-cpp

i coded this snippet for my own need it uses TStringBuilder Class

file-to-byte-array-delphi-

i coded this snippet for my own need it uses TStringBuilder Class

filelessremotepe

Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique

freeze.rs

Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST

funnykeylogger

Simple, lightweight and compact key logger written for fun ...

huan

Encrypted PE Loader Generator

jlaive

Antivirus Evasion Tool for .NET/Native (x64) Executables

jscythe

Abuse the node.js inspector mechanism in order to force any node.js/electron/v8 based process to execute arbitrary javascript code.

lnksploit

Windows subsystem shortcut (lnk) exploit generator written in C#

massayo

Massayo is a small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

paltalk-anti-ads

this is an example of an application that can close (windows ADS) for paltalk it's for educational purpose only i can make better than that but i don't need..you can use windows hocking it's better than sending messages ;)

pe-hijacker

C++ class to backdoor PE binaries.

poison-ivy-reload

Poison Ivy Remote administrator tool Reload

polychaos

PE permutation library

polymorphicengine

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

remote_code_oxidation

rust_syscalls

Single stub direct and indirect syscalling with runtime SSN resolving for windows.