Alternatives and similar repositories for Yaef

Users that are interested in Yaef are comparing it to the libraries listed below

• b4ubles / RootKit
  a very simple rootkit for fun
  ☆18Updated 6 years ago
• haidragon / thread_inline_hook
  稳定多线程中的inline hook
  ☆16Updated 6 years ago
• diegslva / BypassUAC
  ☆20Updated 9 years ago
• devilogic / xvirus
  一个早期的抗启发式查杀的WIN32免杀壳
  ☆45Updated 12 years ago
• zhuhuibeishadiao / exploit-RemoteDesktopServerDriver
  exploit termdd.sys(support kb4499175)
  ☆60Updated 6 years ago
• stonedreamforest / re_avdevprot
  逆向小红伞杀毒软件驱动——avdevprot
  ☆24Updated 7 years ago
• wanttobeno / wmifilter
  驱动层拦截web访问源码
  ☆30Updated 7 years ago
• aaaddress1 / Lexa
  Windows Application Loader Running *.Exe files in Memory against Scrylla
  ☆21Updated 5 years ago
• nsxz / ReflectiveELFLoader
  Code for diskless loading of ELF Shared Library using Reflective DLL Injection
  ☆53Updated 9 years ago
• acru3l / HEVD-exploits
  The place where my HackSys Extreme Vulnerable Driver exploits go.
  ☆25Updated 6 years ago
• DissectMalware / WinNativeIO
  Using Undocumented NTDLL Functions to Read/Write/Delete File
  ☆18Updated 4 years ago
• AXDOOMER / run-embedded-elf-from-memory
  Experiment with Linux system calls (memfd_create, fexecve, fork...)
  ☆24Updated 6 years ago
• y11en / PEBFake
  PEBFake(修改PEB 伪装当前进程路径、参数等)
  ☆53Updated 4 years ago
• Nerlant / SyscallDumper
  ☆19Updated 6 years ago
• killvxk / POCS
  May the POC be with you
  ☆63Updated 2 months ago
• waleedassar / SyscallNumberFinder
  ☆33Updated 4 years ago
• HyperSine / SdoKeyCrypt-sys-local-privilege-elevation
  CVE-2019-9729. Transferred from https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation
  ☆83Updated 6 years ago
• jacob-baines / jit_obfuscation_poc
  Using GNU lightning to generate xor deobfuscation at runtime
  ☆28Updated 8 years ago
• guidoreina / http_inspect
  HTTP/HTTPS/DNS inspector (windows driver)
  ☆27Updated 6 years ago
• bigric3 / CAJViewer-LPE-Exploit
  ☆18Updated 7 years ago
• tophertimzen / shellcodeTester
  GUI Application in C# to run and disassemble shellcode
  ☆36Updated 8 years ago
• yougar0 / LOWLLVM
  参照着OLLVM写的一个混淆库,只要机器上有装LLVM，就可以直接编译拿来用
  ☆55Updated 7 years ago
• leonwxqian / windows-defender-nscript-loader
  A exe loader that can load NScript evaluation engine of Windows Defender/Microsft Security Essential. You can fuzz NScript by using this.…
  ☆28Updated 8 years ago
• bl4ckswan / anti-disassembly
  ☆21Updated 8 years ago
• sugice / AzusaDefender
  安全卫士项目
  ☆32Updated 8 years ago
• leeqwind / MBRhack
  感染MBR 下载并运行文件。
  ☆33Updated 3 years ago
• Trietptm-on-Coding-Algorithms / ZeroBank-ring0-bundle
  Kernel-Mode rootkit that connects to a remote server to send & recv commands
  ☆33Updated 7 years ago
• lantie / unpack02
  upx静态脱壳机源码
  ☆17Updated 6 years ago
• epakskape / greenshellcode
  Green shellcode challenge tools
  ☆22Updated 6 years ago
• wes4m / unHooker
  Kernel (Ring0) - SSDT unhook driver
  ☆15Updated 7 years ago