Alternatives and similar repositories for Sanctum:

Users that are interested in Sanctum are comparing it to the libraries listed below

• Kudaes / ADPT
  DLL proxying for lazy people
  ☆155Updated 3 months ago
• Kudaes / rust_tips_and_tricks
  Rust For Windows Cheatsheet
  ☆116Updated 5 months ago
• safedv / RustVEHSyscalls
  A Rust port of LayeredSyscall — performs indirect syscalls while generating legitimate API call stack frames by abusing VEH.
  ☆138Updated 5 months ago
• joaoviictorti / rustclr
  Host CLR and run .NET binaries using Rust
  ☆92Updated this week
• 0xflux / Rust-Hells-Gate
  Rust malware EDR evasion via direct syscalls, fully implemented as an example in Rust
  ☆38Updated 9 months ago
• joaoviictorti / dinvk
  Dynamically invoke arbitrary code with Rust tricks, #[no_std] support, and compatibility for x64, x86, ARM64 and WoW64 (DInvoke)
  ☆57Updated this week
• BlackSnufkin / Rusty-Playground
  Some Rust program I wrote while learning Malware Development
  ☆128Updated last month
• joaoviictorti / userdmp
  A Rust crate to parse user-mode minidump files generated on Windows
  ☆12Updated 3 weeks ago
• memN0ps / venom-rs
  Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)
  ☆334Updated last year
• janoglezcampos / rust_syscalls
  Single stub direct and indirect syscalling with runtime SSN resolving for windows.
  ☆209Updated 2 years ago
• V-i-x-x / kernel-callback-removal
  kernel callback removal (Bypassing EDR Detections)
  ☆142Updated last week
• Irate-Walrus / stardust-rs
  An i686 & x86_64 position independent implant template for Rust 🦀
  ☆23Updated 2 weeks ago
• Kudaes / RustHollow
  Inject a shellcode in a remote process using Process Hollowing.
  ☆49Updated 3 years ago
• Nordgaren / stealth-win
  ☆46Updated last year
• c2pain / RustBird
  Early Bird APC Injection in Rust
  ☆57Updated 5 months ago
• Kudaes / Bin-Finder
  Detect EDR's exceptions by inspecting processes' loaded modules
  ☆130Updated last year
• wildbook / hwbp-rs
  A thin Rust wrapper around Windows' hardware breakpoints.
  ☆21Updated 2 years ago
• JayGLXR / RustyMirage
  A Rust version of Mirage, a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆31Updated 3 weeks ago
• b1tg / Ox-C2
  Command & Control server and agent written in Rust
  ☆36Updated 2 years ago
• safedv / Rustic64
  64-bit, position-independent implant template for Windows in Rust.
  ☆116Updated 5 months ago
• ngn13 / shrk
  LKM rootkit for modern kernels, with DNS C2 and a simple web interface
  ☆64Updated 3 weeks ago
• mannyfred / SentinelBruh
  Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution
  ☆42Updated 8 months ago
• joaoviictorti / coffeeldr
  A COFF Loader written in Rust
  ☆63Updated this week
• postrequest / dynamic-winapi
  Dynamic rust bindings to the Windows API
  ☆16Updated 3 years ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆150Updated 4 months ago
• akamai / Mirage
  Mirage is a PoC memory evasion technique that relies on a vulnerable VBS enclave to hide shellcode within VTL1.
  ☆72Updated last month
• safedv / Rustic64Shell
  A 64-bit, position-independent code reverse TCP shell for Windows — built in Rust.
  ☆62Updated 3 months ago
• Ben-Lichtman / reloader
  Reflective DLL self-loading as a library
  ☆19Updated last year
• gatariee / ldrgen
  Template-based generation of shellcode loaders
  ☆77Updated 11 months ago
• Signal-Labs / iat_unhook_sample
  (First Public?) Sample of unhooking ntdll (All Exports & IAT imports) hooks in Rust using in-memory disassembly, avoiding direct syscalls…
  ☆132Updated 3 weeks ago