56 skills found · Page 1 of 2
M2TeamArchived / NSudo[Deprecated, work in progress alternative: https://github.com/M2Team/NanaRun] Series of System Administration Tools
ricardojoserf / NativeDumpDump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)
ricardojoserf / TrickDumpDump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!
f1zm0 / HadesGo shellcode loader that combines multiple evasion techniques
safedv / RustiveDumpLSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and remote file transmission.
safedv / RustPotatoA Rust implementation of GodPotato — abusing SeImpersonate to gain SYSTEM privileges. Includes a TCP-based reverse shell and indirect NTAPI for various operations.
ricardojoserf / SAMDumpExtract the SAM and SYSTEM hives using the Volume Shadow Copy (VSS) API. With exfiltration and XOR obfuscation options. Implemented in C#, C++, Crystal and Python
ricardojoserf / NativeBypassCredGuardBypass Credential Guard by patching WDigest.dll using only NTAPI functions
safedv / RustSoliloquyA Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and indirect NTAPIs for core operations.
reveng007 / ReflectiveNtdllA Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber
voidvxvi / HellBunnyShellcode loader written in C and Assembly utilizing direct or indirect syscalls to evade UM EDR hooks
MSxDOS / NtapiRust FFI bindings for Native API
diversenok / NtToolsSome random system tools for Windows
ricardojoserf / NativeTokenImpersonateImpersonate Tokens using only NTAPI functions
Faran-17 / HellshazzardIndirect Syscall implementation to bypass userland NTAPIs hooking.
Fyyre / DirectntapiDirectNtApi - simple method to make ntapi function call without importing or walking export table. Work under Windows 7, 8 and 10
GetRektBoy724 / HalosUnhookerHalos Gate-based NTAPI Unhooker
tenox7 / ReglnWindows Rregistry Linking Utility
ricardojoserf / MemorySnitcherVulnerable (on purpose) programs to leak NtReadVirtualMemory address for stealthier API resolution (no GetProcAddress, GetModuleHandle or LoadLibrary in the IAT)
jaytiwari05 / ShellcoderunnerA simple research-focused AES-based shellcode loader demonstrating in-memory execution and NTAPI techniques to help understand how custom loaders can bypass Windows Defender–based detection.
