Back to projects
DevTools

ReflectiveNtdll by reveng007

View on GitHub
A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber. Maintained by reveng007 on GitHub, where it has earned 178 stars from the community.
reveng007
reveng007
Maintainer
178 stars
24 forks
3 watchers

Install

Languages

C100%
C++0%
Last updated3y ago
LicenseMIT

More Fiber projects

Ask MadeWithWhat

AI answers may contain mistakes — please double-check important details.