Alternatives and similar repositories for Revenant:

Users that are interested in Revenant are comparing it to the libraries listed below

• Maldev-Academy / EntropyReducer
  Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists
  ☆408Updated last year
• Maldev-Academy / HellHall
  Performing Indirect Clean Syscalls
  ☆508Updated last year
• georgesotiriadis / Chimera
  Automated DLL Sideloading Tool With EDR Evasion Capabilities
  ☆465Updated last year
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆335Updated last year
• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆615Updated 3 months ago
• xforcered / BokuLoader
  A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!
  ☆321Updated 6 months ago
• icyguider / LightsOut
  Generate an obfuscated DLL that will disable AMSI & ETW
  ☆317Updated 6 months ago
• zer0condition / mhydeath
  Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.
  ☆390Updated last year
• HavocFramework / Modules
  Modules used by the Havoc Framework
  ☆212Updated 7 months ago
• senzee1984 / Amsi_Bypass_In_2023
  Amsi Bypass payload that works on Windwos 11
  ☆374Updated last year
• S3cur3Th1sSh1t / Caro-Kann
  Encrypted shellcode Injection to avoid Kernel triggered memory scans
  ☆360Updated last year
• mertdas / PrivKit
  PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.
  ☆384Updated 7 months ago
• sinfulz / JustEvadeBro
  JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.
  ☆305Updated 5 months ago
• Octoberfest7 / MemFiles
  A CobaltStrike toolkit to write files produced by Beacon to memory instead of disk
  ☆446Updated 6 months ago
• matro7sh / myph
  shellcode loader for your evasion needs
  ☆309Updated 2 months ago
• kleiton0x00 / Proxy-DLL-Loads
  A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.
  ☆332Updated 7 months ago
• Maldev-Academy / Christmas
  ☆250Updated last year
• icyguider / UAC-BOF-Bonanza
  Collection of UAC Bypass Techniques Weaponized as BOFs
  ☆439Updated 11 months ago
• trickster0 / TartarusGate
  TartarusGate, Bypassing EDRs
  ☆560Updated 3 years ago
• netero1010 / GhostTask
  A tool employs direct registry manipulation to create scheduled tasks without triggering the usual event logs.
  ☆506Updated 3 weeks ago
• NUL0x4C / APCLdr
  Payload Loader With Evasion Features
  ☆316Updated 2 years ago
• tastypepperoni / PPLBlade
  Protected Process Dumper Tool
  ☆528Updated last year
• Bl4ckM1rror / FUD-UUID-Shellcode
  ☆324Updated last year
• florylsk / RecycledInjector
  Native Syscalls Shellcode Injector
  ☆264Updated last year
• SaadAhla / UnhookingPatch
  Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime
  ☆301Updated last year
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆224Updated this week
• fortra / No-Consolation
  A BOF that runs unmanaged PEs inline
  ☆570Updated 3 months ago
• nickvourd / COM-Hunter
  COM Hijacking VOODOO
  ☆262Updated this week
• rtecCyberSec / Packer_Development
  Slides & Code snippets for a workshop held @ x33fcon 2024
  ☆250Updated 7 months ago
• REDMED-X / OperatorsKit
  Collection of Beacon Object Files (BOF) for Cobalt Strike
  ☆557Updated 6 months ago