Alternatives and similar repositories for HideFromAMSI

Users that are interested in HideFromAMSI are comparing it to the libraries listed below

• ThunderGunExpress / Reflective_Schtasks
  ☆54Updated 6 years ago
• decay88 / Tengri_Shellcode_Loader
  Encrypted Shellcode Loader Generator
  ☆22Updated 6 years ago
• vysecurity / VBA-RunPE
  A VBA implementation of the RunPE technique or how to bypass application whitelisting.
  ☆14Updated 6 years ago
• ThunderGunExpress / ThunderChrome
  ☆36Updated 6 years ago
• samk1 / IISPowershellModule
  IIS Handler for *.ps1 files
  ☆9Updated 5 years ago
• vysecurity / WindfarmDynamite-CNA
  CobaltStrike Aggressor Script to utilise FuzzySec's Windows Notification Framework Research to Spawn a Shell under Explorer.exe
  ☆16Updated 5 years ago
• ChaitanyaHaritash / NIM-Scripts
  ☆18Updated 3 years ago
• crawl3r / FunWithAMSI
  A repo to hold any bypasses I work on/study/whatever
  ☆19Updated 4 years ago
• guardicore / vmware_guest_auth_bypass
  Proof of concept of VMSA-2017-0012
  ☆41Updated 7 years ago
• slyd0g / XORShellcodeLoader
  Loads shellcode from a resource file.
  ☆22Updated 5 years ago
• sunnyc7 / EvilWMIProvider
  Installs And Executes Shellcode
  ☆11Updated 9 years ago
• a7t0fwa7 / windows-ps-callbacks-experiments
  Files for http://deniable.org/windows/windows-callbacks
  ☆25Updated 4 years ago
• benpturner / Invoke-DCOM
  C# DCOM Execution
  ☆18Updated 5 years ago
• rasta-mouse / AsyncSockets
  Example of async client/server sockets in .NET 5
  ☆17Updated 3 years ago
• mobdk / ExecuteShellcodeWithSyscalls
  Execute shellcode with syscalls from C# .dll
  ☆12Updated 5 years ago
• neofito / CVE-2020-1337
  CVE-2020-1048 bypass: binary planting PoC
  ☆32Updated 4 years ago
• djhohnstein / SharpEdge
  C# Implementation of Get-VaultCredential
  ☆13Updated 6 years ago
• checkymander / TokenContextManipulation
  Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.
  ☆12Updated 6 years ago
• riskydissonance / Ridgway
  A quick tool for hiding a new process running shellcode.
  ☆57Updated 4 years ago
• ch3rn0byl / HookedRDP
  ☆51Updated 5 years ago
• ohjeongwook / RunShellcode
  Windows Shellcode Testing Utility to Run Shellcode From A File
  ☆12Updated 5 years ago
• jnqpblc / SharpDir
  SharpDir is a simple code set to search both local and remote file systems for files and is compatible with Cobalt Strike.
  ☆27Updated 5 years ago
• sailay1996 / SECOMN_EoP
  Sound Research SECOMN service Privilege Escalation (windows 10)
  ☆40Updated 5 years ago
• bharadwajyas / ppdump-public
  Protected Process (Light) Dump: Uses Zemana AntiMalware Engine To Open a Privileged Handle to a PP/PPL Process And Inject MiniDumpWriteDu…
  ☆22Updated 5 years ago
• fashionproof / CheckSafeBoot
  I used this to see if an EDR is running in Safe Mode
  ☆37Updated 4 years ago
• 3gstudent / Add-Dll-Exports
  Use to generate DLL through Visual Studio
  ☆19Updated 7 years ago
• manicstreetcoders / AppInitGlobalHooks-Mimikatz
  Hide Mimikatz From Process Lists
  ☆17Updated 9 years ago
• 3gstudent / Writeup
  interesting analysis
  ☆16Updated 7 years ago
• OsandaMalith / WindowsInternals
  Experiments on the Windows Internals
  ☆30Updated 5 years ago
• ThunderGunExpress / Reflective_PSExec
  ☆45Updated 6 years ago