fileless

There are 2 repositories under fileless topic.

bytecode77 / r77-rootkit
Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
av-evasion fileless rootkit
Language:C 1997
bytecode77 / living-off-the-land
Fileless attack with persistence
fileless fileless-attack poc
Language:C++ 349
liamg / memit
:no_entry_sign::floppy_disk: Run binaries straight from memory in Linux
memfd shenanigans fileless fileless-attack
Language:Go 315
ariary / fileless-xec
Stealth dropper executing remote binaries without dropping them on disk .(HTTP3 support, ICMP support, invisible tracks, cross-platform,...)
dropper stealth pentest pentest-tool golang quic http3 bypass-firewall fileless security memfd
Language:Go 197
cinit / LibcoreSyscall
A library for loading ELF from memory and/or making Linux syscalls on Android written in pure Java.
android-library libart linux-syscall android syscall elf-loader in-memory-execution jni jni-android xposed fileless-injection fileless-shellcode fileless
Language:Java 180
Leo4j / Invoke-SMBRemoting
Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement
fileless lateral-movement named-pipes pentesting-tools postexplotation command-execution shell
Language:PowerShell 160
EddieIvan01 / memexec
A library for loading and executing PE (Portable Executable) from memory without ever touching the disk
fileless malware-development redteam windows-pe
Language:Rust 142
bytecode77 / slui-file-handler-hijack-privilege-escalation
Slui File Handler Hijack UAC Bypass Local Privilege Escalation
uac-bypass fileless
Language:C++ 92
SafeBreach-Labs / backdoros
backdorOS is an in-memory OS written in Python 2.7 with a built-in in-memory filesystem, hooks for open() calls and imports, Python REPL etc.
redteam in-memory python fileless
Language:Python 67
Ricky5panish / PE-Runtime-Crypter
A runtime Crypter written in C++ to bypass AVs signature based detection
bypass-antivirus cpp crypter evasion fileless pe-file poc redteam runtime winapi x64
Language:C++ 30
3NC0D / Powershell-Obfuscator
Powerful script for logical obfuscation of powershell scripts
powershell obfuscation obfuscator mimikatz fileless protection powershell-script invoke base64 base64-encoding empire powersploit
Language:Python 28
malwarekid / Fileless-PE
Python program Fileless-PE.py generates a Python script (PEloader.py) to load a DLL or EXE file from a given URL. It provides functionality to specify a method to execute if the file is a DLL. The script utilizes the pythonmemorymodule library for memory manipulation.
dll exe fileless in-memory loader malware memory-execution pe python script trojan virus
Language:Python 23
Ricky5panish / ICMP-Shellcode-Loader
A Golang shellcode loader that receives payloads via ICMP packets from a C2 server to bypass firewalls
bypass-antivirus bypass-firewall golang icmp-tunnel remote-control shellcode command-and-control evasion redteam botnet fileless
Language:Go 17
hideckies / LOLGEN
LOLGEN: Living Off The Land Payload Generator
fileless living-off-the-land lolbins security redteam
Language:JavaScript 8
mcdulltii / psmalware
Powershell Malware
powershell-malware encoding payload bypass powershell fileless
Language:PowerShell 6
zerodaywolf / memx
Generate droppers that use memfd_create() to execute ELF binaries without dropping them on disk
fileless malware redteam
Language:Go 4
diante0x7 / Fileless-Server
Test server utilizing Asyncio and Threading to perform basic administrative operations and receive data.
asyncio fileless python server threading
Language:Python 2
cyberok-org / php-hidden-webshell
Materials from the speech "How to protect yourself from hidden web shells"
fileless php-backdoor web-hacking php-webshell process-injection
Language:PHP 1

fileless

bytecode77 / r77-rootkit

bytecode77 / living-off-the-land

liamg / memit

ariary / fileless-xec

cinit / LibcoreSyscall

Leo4j / Invoke-SMBRemoting

EddieIvan01 / memexec

bytecode77 / slui-file-handler-hijack-privilege-escalation

SafeBreach-Labs / backdoros

Ricky5panish / PE-Runtime-Crypter

3NC0D / Powershell-Obfuscator

malwarekid / Fileless-PE

Ricky5panish / ICMP-Shellcode-Loader

hideckies / LOLGEN

mcdulltii / psmalware

zerodaywolf / memx

diante0x7 / Fileless-Server

cyberok-org / php-hidden-webshell