Alternatives and similar repositories for AM

Users that are interested in AM are comparing it to the libraries listed below

• Mantraufo / KanonSys
  Bypass Windows defender syscall
  ☆18Updated 4 years ago
• GetRektBoy724 / SharpLoadLibrary
  An attempt to make a LoadLibrary designed for offensive operations, in C# obviously.
  ☆55Updated 3 years ago
• mobdk / Upsilon
  Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used
  ☆92Updated 4 years ago
• GetRektBoy724 / TripleS
  Extracting Syscall Stub, Modernized
  ☆66Updated 3 years ago
• GetRektBoy724 / JALSI
  JALSI - Just Another Lame Shellcode Injector
  ☆30Updated 4 years ago
• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆117Updated 4 years ago
• Aetsu / SLib
  SLib is a sandbox evasion library that implements some of the checks from https://evasions.checkpoint.com in C#
  ☆66Updated 2 years ago
• GeorgePatsias / PayloadFactory
  C# implementation of Shellcode delivery techniques using PInvoke and DInvoke variations for API calling.
  ☆37Updated 4 years ago
• dosxuz / ProcessGhosting
  Small POC for process ghosting
  ☆40Updated 4 years ago
• rvrsh3ll / PELoader
  Load PE via XML Attribute
  ☆32Updated 6 years ago
• tomcarver16 / AmsiHook
  AmsiHook is a project I created to figure out a bypass to AMSI via function hooking.
  ☆67Updated 5 years ago
• OlivierLaflamme / DNSWho
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Updated 5 years ago
• DragoQCC / ShellcodeEncryption
  Used to AES encrypt shellcode, can take password or use built in default should be used with Iron Injector to generate and execute shellc…
  ☆15Updated 3 years ago
• notdodo / adduser-dll
  Simple DLL that add a user to the local Administrators group
  ☆77Updated 4 years ago
• KINGSABRI / DotNetToJScriptMini
  A simplified version of DotNetToJScript to create a JScript file which loads a .NET v2 assembly from memory.
  ☆46Updated 4 years ago
• aaaddress1 / xlsKami
  Out-of-the-Box Tool to Obfuscate Excel XLS. Include Obfuscation & Hide for Cell Labels & BoundSheets
  ☆48Updated 4 years ago
• KINGSABRI / AssemblyLoader
  Various implementations for C# in memory execution. Assembly.Load() Assembly.LoadFile() AppDomain.ExecuteAssembly()
  ☆35Updated 4 years ago
• maltek-labs / Malcode-Obfuscator
  Polymorphic code obfuscator for use in Red Team operations
  ☆32Updated 3 years ago
• JohnWoodman / stealthInjector
  Injects shellcode into remote processes using direct syscalls
  ☆77Updated 5 years ago
• GetRektBoy724 / SysGate
  One gate to all syscalls!
  ☆23Updated 3 years ago
• Shrfnt77 / DynamicSyscalls
  DynamicSyscalls is a library written in .net resolves the syscalls dynamically (Has nothing to do with hooking/unhooking)
  ☆66Updated 3 years ago
• FuzzySecurity / AdvSim.Cryptography
  Simple and sane cryptographic wrapper library.
  ☆33Updated 2 years ago
• mobdk / Sigma
  Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx
  ☆15Updated 4 years ago
• paranoidninja / DotNetTracer
  C code to enable ETW tracing for Dotnet Assemblies
  ☆32Updated 3 years ago
• BC-SECURITY / SocksProxyServer-Plugin
  Socks Proxy Server Plugin for Invoke-SocksProxy
  ☆18Updated 10 months ago
• scriptchildie / MaliciousVBA
  Reverse shell macro using Word VBA
  ☆17Updated 5 years ago
• NVISOsecurity / DInvisibleRegistry
  DInvisibleRegistry
  ☆82Updated 5 years ago
• ihack4falafel / Dell-Driver-EoP-CVE-2021-21551
  Dell Driver EoP (CVE-2021-21551)
  ☆32Updated 3 years ago
• Allevon412 / PPL_Sandboxer
  ☆82Updated 3 years ago
• vestjoe / cobaltstrike_services
  AutoStart teamserver and listeners with services
  ☆75Updated 4 years ago