Alternatives and similar repositories for Yaef:

Users that are interested in Yaef are comparing it to the libraries listed below

• b4ubles / RootKit
  a very simple rootkit for fun
  ☆19Updated 6 years ago
• wanttobeno / wmifilter
  驱动层拦截web访问源码
  ☆29Updated 6 years ago
• wes4m / unHooker
  Kernel (Ring0) - SSDT unhook driver
  ☆14Updated 7 years ago
• aaaddress1 / Lexa
  Windows Application Loader Running *.Exe files in Memory against Scrylla
  ☆21Updated 5 years ago
• emc2314 / PEZEncrypt
  PE Infector/Cryptor source code
  ☆15Updated 7 years ago
• Nerlant / SyscallDumper
  ☆19Updated 5 years ago
• zionlion67 / rootkit
  Linux kernel module that provides remote backdoor using netfilters , file and pid hiding.
  ☆10Updated 7 years ago
• pwnslinger / SMC
  Self-modifying Code de-obfuscation
  ☆16Updated 7 years ago
• Scorbutics / InjectItx64
  Basic Injector running on x64 machines that is able to load into x64 AND x86 processes
  ☆21Updated 5 years ago
• v-a-c-u-u-m / mem_inject
  Linux shellcode code memory injection library .so .dll injection without ptrace example PoC
  ☆23Updated 3 years ago
• cow0o0 / VM
  vm -- code interpreter
  ☆26Updated 5 years ago
• Trietptm-on-Coding-Algorithms / ZeroBank-ring0-bundle
  Kernel-Mode rootkit that connects to a remote server to send & recv commands
  ☆31Updated 6 years ago
• humeafo / scc
  a C/C++ shellcode compiler based on llvm/clang
  ☆36Updated 8 years ago
• jacob-baines / jit_obfuscation_poc
  Using GNU lightning to generate xor deobfuscation at runtime
  ☆26Updated 7 years ago
• devilogic / xvirus
  一个早期的抗启发式查杀的WIN32免杀壳
  ☆43Updated 11 years ago
• DissectMalware / WinNativeIO
  Using Undocumented NTDLL Functions to Read/Write/Delete File
  ☆18Updated 4 years ago
• guidoreina / http_inspect
  HTTP/HTTPS/DNS inspector (windows driver)
  ☆26Updated 6 years ago
• OrShazam / ChainEngine
  automates exploits using ROP chains, using ntdll-scraper
  ☆16Updated 2 years ago
• houjingyi233 / ALPC-fuzz-study
  ☆25Updated 6 years ago
• zhuhuibeishadiao / exploit-RemoteDesktopServerDriver
  exploit termdd.sys(support kb4499175)
  ☆58Updated 5 years ago
• bl4ckswan / anti-disassembly
  ☆19Updated 7 years ago
• haidragon / thread_inline_hook
  稳定多线程中的inline hook
  ☆16Updated 5 years ago
• usertoroot / StealthInject
  This tool allows you to stealthily inject a DLL into a process.
  ☆14Updated 9 years ago
• codingtest / EMET
  reversed emet tool
  ☆24Updated 12 years ago
• byck01 / KernelBugTest
  KernelBugTest
  ☆15Updated 6 years ago
• SLAUC91 / DLLFinder
  Enumerate the DLLs/Modules using NtQueryVirtualMemory
  ☆32Updated 9 years ago
• y11en / r0ak
  r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems
  ☆14Updated 6 years ago
• Darkabode / possessor
  User-mode part of Zerokit platform
  ☆20Updated 5 years ago
• killvxk / Researchs
  一些研究
  ☆14Updated 5 years ago
• MortenSchenk / LoadLibrary-CFG-Bypass
  Control Flow Guard bypass using LoadLibrary and IsBadCodePtr
  ☆45Updated 8 years ago