Pinned Loading

1. go-native-syscall go-native-syscall Public

   go-native-syscall is Go (+ asm) Windows syscall library that resolves, hashes, caches, and invokes direct (and indirect now) NT calls without going through the win api layer traditionally

   Go 15 4

2. go-wincall go-wincall Public

   load arbitrary dlls, call any exported function, calls execute inside g0 as normal syscalls do from the tradition route, no syscall or windows imports, exposes many convenience functions for winapi…

   Go 6 3

3. meltloader meltloader Public

   a modular reflective dll/pe loader that allows for easy chaining of dlls and pes together in a single or remote process with tight memory management and encryption capabilities to evade memory scan…

   Go 6 3

4. dead-av dead-av Public

   kill all EDR and AV processes continuously, a rewritten implementation of BlackSnufkin's BYOVD research

   Go 4 3

5. vulkan-proxy vulkan-proxy Public

   fun way to proxy syscalls or regular function calls through vulkan-1.dll

   Go 5 1

6. ntfsparse ntfsparse Public

   Go 1