# reveng007/ReflectiveNtdll

<https://repo.masters-masters.com/en/repos/reveng007/ReflectiveNtdll>

[Home](https://repo.masters-masters.com/en) › [reveng007](https://repo.masters-masters.com/en/owners/reveng007) › [ReflectiveNtdll](https://repo.masters-masters.com/en/repos/reveng007/ReflectiveNtdll)

reveng007/ReflectiveNtdll has 178 stars on GitHub. Its RepoMasters card: Prototype tier. A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking…

| Field | Value |
| --- | --- |
| Owner | [reveng007](https://repo.masters-masters.com/en/owners/reveng007) |
| Stars | 178 |
| Forks | 23 |
| Language | [C](https://repo.masters-masters.com/en/languages/c) |
| License | MIT |
| Created | 2023 |
| Topics | antivirus, dropper, edr, evasion, fiber, implant, malware, ntdll-unhooking, systemfunction033, process-injection |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [reveng007/ReflectiveNtdll](https://github.com/reveng007/ReflectiveNtdll) |

## Repository

A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by reveng007

- [reveng007/DarkWidow · ★ 814 · C · Beta](https://repo.masters-masters.com/en/repos/reveng007/DarkWidow)
- [reveng007/Learning-EDR-and-EDR\_Evasion · ★ 292 · C++ · Alpha](https://repo.masters-masters.com/en/repos/reveng007/Learning-EDR-and-EDR_Evasion)
- [reveng007/reveng\_rtkit · ★ 272 · C · Alpha](https://repo.masters-masters.com/en/repos/reveng007/reveng_rtkit)
- [reveng007/SharpGmailC2 · ★ 265 · C\# · Alpha](https://repo.masters-masters.com/en/repos/reveng007/SharpGmailC2)

## Nearby in C

- [M1ndo/WerDump · ★ 178 · C · Prototype](https://repo.masters-masters.com/en/repos/M1ndo/WerDump)
- [joshuarli/iss · ★ 178 · C · Prototype](https://repo.masters-masters.com/en/repos/joshuarli/iss)
- [PascalPixel/alchemy · ★ 178 · C · Prototype](https://repo.masters-masters.com/en/repos/PascalPixel/alchemy)
- [Mikachu/openbox · ★ 178 · C · Prototype](https://repo.masters-masters.com/en/repos/Mikachu/openbox)
- [anoek/ex-sdl-cairo-freetype-harfbuzz · ★ 178 · C · Prototype](https://repo.masters-masters.com/en/repos/anoek/ex-sdl-cairo-freetype-harfbuzz)
- [prideout/fluidsim · ★ 178 · C · Prototype](https://repo.masters-masters.com/en/repos/prideout/fluidsim)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.