☆98Mar 28, 2026Updated 7 months ago
Alternatives and similar repositories for WindowsRootkitsGuide
Users that are interested in WindowsRootkitsGuide are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 8 months ago
- Reflective x64 Loader written in C/ASM☆15Dec 2, 2025Updated 11 months ago
- MCP for reverse engineering☆46Mar 30, 2025Updated last year
- A Rust PoC implementation of the Early Bird process hollowing technique, inspired by https://github.com/boku7/HOLLOW.☆31Feb 7, 2025Updated last year
- Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click t…☆33Oct 16, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆157Apr 23, 2025Updated last year
- C# MCP server for kernel & user-mode Windows debugging — DbgEng COM, KDNET, Frida, dbgsrv, TTD, and integrated VM control. 29 tools for L…☆46Oct 10, 2026Updated 3 weeks ago
- A concept of using a ROP chain paired with a WRMSR primitive to call kernel functions and map unsigned drivers through BYOVD (AmdTools64.…☆67Sep 21, 2026Updated last month
- monitors hidden syscalls called from call of duty anticheat☆88Jan 13, 2025Updated last year
- ☆104Nov 25, 2024Updated last year
- Linux Shared Library to Shellcode Loader☆105Feb 15, 2026Updated 8 months ago
- Intel 64/Windows low-level experiments☆118Sep 16, 2026Updated last month
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-…☆17May 18, 2026Updated 5 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- The different ways to dump lsass☆290Jul 19, 2026Updated 3 months ago
- Stage 0☆170Dec 18, 2024Updated last year
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- AES-256-CBC shellcode encryption tool.☆21Jan 12, 2026Updated 9 months ago
- Patches the AmsiScan function in clr.dll allowing for unrestricted assembly loading in .NET☆52May 5, 2025Updated last year
- A cross-platform tool to find traces of old SIDs remaining in LDAP objects of the Active Directory☆26Oct 9, 2026Updated 3 weeks ago
- ☆28Jun 4, 2026Updated 5 months ago
- Windows rootkit designed to work with BYOVD exploits☆226Jan 18, 2025Updated last year
- OSINT and infrastructure analysis tool leveraging AI GPT and multiple APIs to gather intelligence about domains, certificates, and web as…☆19Jun 8, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Takes a raw shellcode file (or a hex string) and produces a standalone .exe☆13May 29, 2026Updated 5 months ago
- Source-to-source obfuscator (ClangTooling) for C☆13Sep 2, 2026Updated 2 months ago
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆48Jun 18, 2026Updated 4 months ago
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 6 months ago
- Dreg's setup for lldb reversing. The simplest and easiest possible, without scripting. lldb debugging setup.☆15May 2, 2024Updated 2 years ago
- Tools to recover, extract and decrypt Phantom wallets☆41May 24, 2025Updated last year
- A high-performance C++ framework for emulating executable binaries☆131Nov 23, 2025Updated 11 months ago
- Just another EDR killer☆142Jan 21, 2026Updated 9 months ago
- single-threaded event driven sleep obfuscation poc for linux☆49Jun 14, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Red-team your RAG pipeline for prompt injection, source-document leakage, and cross-document smuggling, in CI. The gap between RAG eval (…☆30Updated this week
- Shellcode encryptor using a substitution cipher with a randomly generated key.☆145Jan 18, 2025Updated last year
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆82Sep 10, 2026Updated last month
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆95Sep 16, 2026Updated last month
- ☆19Sep 17, 2025Updated last year
- A Linux kernel rootkit in Rust using a custom made type-2 hypervisor, eBPF XDP and TC programs☆340Feb 27, 2026Updated 8 months ago
- I’m building a hands‑on Security Operations Center (SOC) home lab from scratch and documenting my progress as I learn defensive security …☆17Updated this week