Alternatives and similar repositories for Capstone-Project

Users that are interested in Capstone-Project are comparing it to the libraries listed below

• florylsk / AmsiBypass123
  ☆13Updated 2 years ago
• MaorSabag / fileSearcher
  A simple BOF (Beacon Object File) to search files in the system
  ☆14Updated last year
• CodeXTF2 / BusySleepBeacon
  This is a simple project made to evade https://github.com/thefLink/Hunt-Sleeping-Beacons by using a busy wait instead of beacon's built i…
  ☆34Updated 3 years ago
• florylsk / NtDump
  Indirect NT syscalls LSASS dumper.
  ☆45Updated 2 years ago
• b4rth0v5k1 / EarlyBirdNTDLL
  ☆36Updated 2 years ago
• MaorSabag / interactive-execute-shellcode
  A simple PoC of injection shellcode into a remote process and get the output using namepipe
  ☆42Updated last year
• Ap3x / COFF-Loader
  A reimplementation of Cobalt Strike's Beacon Object File (BOF) Loader
  ☆53Updated last year
• RATandC2 / FilelessNtdllReflection
  Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…
  ☆15Updated 2 years ago
• NUL0x4C / HookingLsassForCredentials
  Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials
  ☆53Updated 2 months ago
• l0n3m4n / bin2shell
  Convert binaries to shellcode (C, C#, CPP, ASM, BOF loader, PS to b64)
  ☆15Updated last month
• d4rkiZ / EmbedExeLnk-
  EmbedExeLnk by x86matthew modified by d4rkiZ
  ☆42Updated 2 years ago
• 0x3rhy / BypassCredGuard-BOF
  BypassCredGuard CS BOF
  ☆42Updated 5 months ago
• Cracked5pider / Rhaast
  doesnt work and wont work on it anymore
  ☆9Updated last year
• paranoidninja / PI-Tracker
  A tracker DLL which enables 'NTAPI->Syscall' tracking whenever it is loaded. It calls 'NtSetInformationProcess' API call with a callback …
  ☆12Updated 8 months ago
• dlima04 / bof-exec
  Tool That Loads and Executes a Beacon Object File With Arguments
  ☆17Updated 3 months ago
• MrAle98 / Sliver-CPPImplant2
  Sliver agent rewritten in C++
  ☆45Updated 10 months ago
• EspressoCake / EntropyFix
  reducing the entropy of your payload
  ☆11Updated 2 years ago
• Meowmycks / etwunhook
  Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.
  ☆47Updated last year
• ScriptIdiot / sw2-secinject
  Section Mapping Process Injection modified with SysWhisper2 (sw2-secinject): Cobalt Strike BOF
  ☆43Updated 3 years ago
• Teach2Breach / rekkoex
  ☆17Updated 11 months ago
• wolfcod / beacondbg
  Beacon Debugger
  ☆40Updated 8 months ago
• trustedsec / Windows-MS-LSAT-RPC-Example
  Windows RPC example calling stubs generated from MS-LSAT and MS-LSAD
  ☆26Updated last year
• WKL-Sec / StackMask
  A PoC of Stack encryption prior to custom sleeping by leveraging CPU cycles.
  ☆64Updated 2 years ago
• FalconForceTeam / bof-winrm-plugin-jump
  ☆27Updated 5 months ago
• fin3ss3g0d / HookFinder
  Simple PoC to locate hooked functions by EDR in ntdll.dll
  ☆38Updated last year
• ShorSec / DllNotificationInjection
  A POC of a new “threadless” process injection technique that works by utilizing the concept of DLL Notification Callbacks in local and re…
  ☆25Updated last year
• ScriptIdiot / sleepmask_ekko_cfg
  Code snippets to add on top of cobalt strike sleepmask kit so that ekko can work in a CFG protected process
  ☆45Updated 2 years ago
• NioZow / bof-collection
  ☆23Updated 4 months ago
• timwhitez / AddressOfEntryPoint-injection
  x64 version
  ☆36Updated 3 years ago
• RixedLabs / IDLE-Abuse
  A method to execute shellcode using RegisterWaitForInputIdle API.
  ☆54Updated 2 years ago