Pinned Loading
-
ThreadlessStompingKann
ThreadlessStompingKann PublicCombining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.
-
-
PPIDSpoofing-BlockNonMSDlls
PPIDSpoofing-BlockNonMSDlls PublicSpawn a process spoofing the parent process and restrict non-Microsoft dlls to inject into the process.
-
PayloadInResources
PayloadInResources PublicSimple AV bypass storing the shellcode in resources and XOR encrypting it.
-
Something went wrong, please refresh the page to try again.
If the problem persists, check the GitHub status page or contact support.
If the problem persists, check the GitHub status page or contact support.