渗透工具

Golang implementation of Reflective load PE from memory Only Supports x64 unmanaged PE Supports Zip file ,auto unzip sleep to bypass Windows Defender ETW bypass & AMSI bypass (default not use) blacklist := []string{ //warning!! may cause panic! } tmpArgs := []string{"coffee"} //peLoader(&shellcode,"syscall") peLoader(&shellcode,"createthread") Usage: Doge-MemX.exe mimikatz.exe Doge-MemX.exe mimikatz.zip Reflect-pe only works for x64 dynamic executables.