rkbennett

pybof. Python module for running BOFs

pyobject_inject. executing shellcode directly from a python variable

od_import. Python

pyThreadlessInject. A python port of CCob's ThreadlessInject

RunAsPy. Python

pyclrhost. Python module for clr hosting the clr-loader package

pythonmemimporter. Python

pysyscalls. Script for adding direct or indirect syscalls for NtOpenProcess, NtAllocateVirtualMemory, NtProtectVirtualMemory, NtWriteVirtualMemory, NtReadVirtualMemory, and NtFreeVirtualMemory as winfunctype functions

pythonclrhost. CLR Hosting in raw python

memimporter. A self-loading implementation of the _memimporter module from py2exe

lowcarb-lazagne. Python

py3memimporter. This is a take on n1nj4sec's pymemimporter, but updated for python3.

powershell_minidump_oneliner. Powershell based proc dump oneliner, based off of https://github.com/PowerShellMafia/PowerSploit/blob/master/Exfiltration/Out-Minidump.ps1

python_ppid_spoofer. This is a python native method for spoofing a ppid when spawning a process

Killer. Is a tool created to evade AVs and EDRs or security tools.