PrototypeCommon
reveng007/ReflectiveNtdll
A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber
- Owner
- reveng007 (personal account)
- Stars
- Stars: 178
- Forks
- Forks: 23
- Language
- C
- License
- MIT
- Created
- 2023
- Topics
- antivirusdropperedrevasionfiberimplantmalwarentdll-unhookingsystemfunction033process-injection
- Tier
- Prototype (100 to 249 ★) What this tier means
More repos by reveng007
All 5 repos by reveng007- reveng007/DarkWidowStars: 813CBeta
- reveng007/Learning-EDR-and-EDR_EvasionStars: 292C++Alpha
- reveng007/reveng_rtkitStars: 272CAlpha
- reveng007/SharpGmailC2Stars: 265C#Alpha
Nearby in C
All C repos- PascalPixel/alchemyStars: 178CPrototype
- chryzsh/redteam-bofsStars: 178CPrototype
- JackTulli/halo-64Stars: 178CPrototype
- Mikachu/openboxStars: 178CPrototype
- anoek/ex-sdl-cairo-freetype-harfbuzzStars: 178CPrototype
- prideout/fluidsimStars: 178CPrototype