Alternatives and similar repositories for StagerDemo

Users that are interested in StagerDemo are comparing it to the libraries listed below

• seventeenman / SelfDel-BOF
  Delete file regardless of whether the handle is used via SetFileInformationByHandle
  ☆53Updated 2 years ago
• coleak2021 / vehsyscall
  vehsyscall:a syscall project that may bypass EDR
  ☆59Updated last year
• M0nster3 / ITaskServers
  Bypass EDR Create TaskServers
  ☆36Updated 2 years ago
• CBLabresearch / PhantomExecution
  Self Cleanup in post-ex job
  ☆58Updated last year
• y11en / schtask-bypass
  免杀计划任务进行权限维持，过主流杀软。 A schtask tool bypass anti-virus
  ☆71Updated 2 years ago
• badboycxcc / Beacon
  重构Beacon
  ☆15Updated last year
• 9bie / BOFRunPortable
  BOF内存运行exe
  ☆29Updated 2 years ago
• mabangde / NTDSDumpEx
  ☆34Updated 7 months ago
• Like0x / AddDefenderExclusions-BOF
  AddDefenderExclusions Beacon Object File
  ☆40Updated 2 years ago
• kyxiaxiang / CrackSleeve4.9
  ☆43Updated 2 years ago
• xunyang1 / ssp_dump_lsass
  RPC 调用添加ssp扩展dump lsass
  ☆20Updated 3 years ago
• qi4L / Blackout-go
  kill AV/EDR
  ☆22Updated 2 years ago
• evilashz / Visual-Studio-BOF-template
  more conveniently Visual-Studio-BOF-template
  ☆71Updated 2 years ago
• INotGreen / Invoke-SharpOffensive
  ☆15Updated last year
• JDArmy / NO445-lateral-movement
  command execute without 445 port
  ☆52Updated 3 years ago
• D0Gshuang / ShellcodeLoader_stager
  ☆19Updated 3 years ago
• AgeloVito / self_delete_bof
  BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…
  ☆77Updated 2 years ago
• aleenzz / SCExec
  ☆30Updated 2 years ago
• timwhitez / memmod
  Fork & modify of Wireguard's Memmod
  ☆33Updated 2 years ago
• qi4L / sRDI-rs
  Rust 重构的 sRDI
  ☆15Updated last year
• kmahyyg / go-rawcopy
  RawCopy - Golang implementation
  ☆24Updated 2 years ago
• parzel / GoBofRunner
  A BOF/COFF loader implemented in Go and CGO.
  ☆22Updated last year
• Z3ratu1 / HackBrowserDataManual
  Get password/cookie/history from browser and use devtools protocol to bypass edr monitoring
  ☆61Updated 6 months ago
• howmp / donut_ollvm
  Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…
  ☆57Updated 2 weeks ago
• timwhitez / Doge-CLRLoad
  load assembly executable file in memory
  ☆41Updated 2 years ago
• b4nbird / shellcodeLoaders
  ☆27Updated 2 years ago
• Haunted-Banshee / Shellcode-Hastur
  Shellcode Reductio Entropy Tools
  ☆73Updated 2 years ago
• dust-life / Free445-BOF
  ☆25Updated 6 months ago
• Hanamaki99 / SharpFrp
  ☆19Updated 3 years ago
• StarfireLab / BrowserPivot
  ☆31Updated 2 years ago