Alternatives and similar repositories for golang-win32

Users that are interested in golang-win32 are comparing it to the libraries listed below

• Narumiii / phantommap

  View on GitHub
  Phantom DLL Hollowing method implemented in modmap
  ☆18Jun 9, 2021Updated 4 years ago
• jweny / gosqlmap

  View on GitHub
  golang 实现 sqlmap
  ☆27Apr 5, 2021Updated 4 years ago
• AzRunRCE / CppHostCLR

  View on GitHub
  C++ Host .NET CLR & Run a assembly directly from ressource (RT_RCDATA) without extraction disk.
  ☆15Mar 18, 2023Updated 2 years ago
• ChrisPritchard / golang-shellcode-runner

  View on GitHub
  A shellcode runner / injector / hollower in Go, for windows
  ☆26May 22, 2022Updated 3 years ago
• abdullah2993 / go-runpe

  View on GitHub
  execute a PE in the address space of another PE aka process hollowing
  ☆60Dec 2, 2021Updated 4 years ago
• koki-develop / lgtm-generator

  View on GitHub
  ☆15Oct 8, 2023Updated 2 years ago
• secgroundzero / SharpAttack

  View on GitHub
  C# Situational Awareness Script
  ☆34Apr 26, 2019Updated 6 years ago
• yatt-ze / AbSent-Loader

  View on GitHub
  Example Loader to be used as a learning resource for people interested in how commercially available malware is made on a very basic leve…
  ☆70May 9, 2019Updated 6 years ago
• XenocodeRCE / NetSeal

  View on GitHub
  A revamp of the good old NetSeal licensing system, with security !
  ☆16Jun 15, 2018Updated 7 years ago
• RivaTesu / Anti-Memory-Dumping

  View on GitHub
  Overwrites the whole PE Header
  ☆20Apr 20, 2020Updated 5 years ago
• freesoul / netstub

  View on GitHub
  Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.
  ☆17Sep 29, 2018Updated 7 years ago
• aaaddress1 / Lexa

  View on GitHub
  Windows Application Loader Running *.Exe files in Memory against Scrylla
  ☆21Dec 20, 2019Updated 6 years ago
• plackyhacker / Peruns-Fart

  View on GitHub
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆117Dec 26, 2021Updated 4 years ago
• timwhitez / Doge-newSyscall

  View on GitHub
  use shellcode as asm function
  ☆23Mar 29, 2022Updated 3 years ago
• vincepare / DPAPIbridge

  View on GitHub
  Windows Data Protection API (DPAPI) command line tool
  ☆21Feb 23, 2019Updated 6 years ago
• mobdk / Upsilon

  View on GitHub
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Aug 26, 2021Updated 4 years ago
• cocomelonc / 2022-04-13-malware-injection-19

  View on GitHub
  Classic DLL injection. Download dll from url and inject. Simple C++ implementation
  ☆10Apr 16, 2022Updated 3 years ago
• bi-zone / etw

  View on GitHub
  Go library for ETW (Event Tracing for Windows) events processing
  ☆72Jul 13, 2022Updated 3 years ago
• marcussacana / RemoteControl

  View on GitHub
  Remote Process Control Library
  ☆26Dec 12, 2022Updated 3 years ago
• notkohlrexo / WindowsDefender-Payload-Downloader

  View on GitHub
  Disabling Windows Defender & downloading payload
  ☆21Jul 28, 2020Updated 5 years ago
• EgeBalci / SelfDefense

  View on GitHub
  Several self-defense shellcodes
  ☆23Jul 16, 2019Updated 6 years ago
• kimullaa / ducker

  View on GitHub
  The joke command like docker
  ☆19May 24, 2019Updated 6 years ago
• 0x9ef / golang-uacbypasser

  View on GitHub
  Windows UAC bypass techniques implemented and written in Go
  ☆216Mar 27, 2022Updated 3 years ago
• AumyF / dotstingray

  View on GitHub
  Highly-customizable dotfiles manager
  ☆14Feb 19, 2023Updated 2 years ago
• futex / Reverse

  View on GitHub
  ☆13Oct 10, 2018Updated 7 years ago
• open-rsm / vr

  View on GitHub
  A library of replicated state machine algorithms is based on Viewstamped Replication Revisited
  ☆14Feb 6, 2021Updated 5 years ago
• clod81 / loader_process_hollow_copy_in_chunk

  View on GitHub
  About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once
  ☆13Jul 14, 2022Updated 3 years ago
• sim1222 / shellgei-misskey

  View on GitHub
  ☆12Jun 5, 2022Updated 3 years ago
• theanonhackuk / prynt

  View on GitHub
  Here i will upload every prynt stealer stub source code and you will discover that is stormkitty 0_0 (I didnt buy anything from prynt whi…
  ☆11Jan 8, 2023Updated 3 years ago
• ameeracle / 3rdEye

  View on GitHub
  Monitor Files and Folders for Changes in Real Time .
  ☆11Jan 10, 2019Updated 7 years ago
• wwh1004 / MethodsMap

  View on GitHub
  A tool to show the method info at runtime
  ☆13Aug 12, 2019Updated 6 years ago
• WangYihang / XorShellcode

  View on GitHub
  Shellcode异或加密工具
  ☆12Mar 23, 2017Updated 8 years ago
• 5k3105 / Pipeline-Editor

  View on GitHub
  Visualy create and connect nodes. Generates xml for python multiprocessing pipeline. (needs rewrite, lots of dead code, specialized appli…
  ☆12Sep 6, 2018Updated 7 years ago
• mili-tan / mTcping

  View on GitHub
  A simple ping-over-tcp tool
  ☆13Jan 9, 2026Updated last month
• biter777 / antideb

  View on GitHub
  Package antideb - basic anti-debugging and anti-reverse engineering protection for your application. Performs basic detection functions s…
  ☆11Mar 2, 2021Updated 4 years ago
• jabex / hammertoss

  View on GitHub
  Proof of Concept of the steganographic algorithms implemented by APT 29 (Hammertos)
  ☆10Nov 26, 2018Updated 7 years ago
• quantumcore / thawne

  View on GitHub
  Thawne is a Sentinel for your Program. A trojan that Reinfects systems. It installs itself on the system it's Executed on. After which Th…
  ☆10Oct 13, 2020Updated 5 years ago
• CryptoBreach / UnhookPoC

  View on GitHub
  A small PoC using DInvoke, dynamically mapping a DLL and executing Win32 APIs for process injection.
  ☆10Dec 16, 2021Updated 4 years ago
• decay88 / WinXRunPE-x86_x64

  View on GitHub
  Two C# RunPE's capable of x86 and x64 injections
  ☆11Dec 2, 2018Updated 7 years ago